ci: Integrate Warden for AI-powered PR code review

[antonis]

📢 Type of change

• Bugfix
• New feature
• Enhancement
• Refactoring

📜 Description

Adds warden.toml at the repo root to enable Warden AI-powered PR reviews. The org-wide workflow in getsentry/.github already runs Warden on all repos — this config file activates it for sentry-react-native.

Skills enabled:

• code-review — AI code review
• find-bugs — bug detection
• security-review — security analysis
• gha-security-review — GitHub Actions security review

Also adds the warden skill to agents.toml for local agent usage.

💡 Motivation and Context

Per the SDK Review and CI standards, SDK repositories should have Warden configured in CI.

Closes RN-585

💚 How did you test it?

Warden ran successfully on this PR via the org-wide workflow. All 4 skills completed with zero findings:

Skill	Findings	Duration	Cost
code-review	0	14.1s	$0.07
find-bugs	0	30.9s	$0.14
security-review	0	24.3s	$0.18
gha-security-review	0	28.7s	$0.12

Org-level secrets (WARDEN_APP_ID, WARDEN_PRIVATE_KEY, WARDEN_ANTHROPIC_API_KEY, WARDEN_MODEL, WARDEN_SENTRY_DSN) were picked up automatically — no repo-level configuration needed.

📝 Checklist

• I added tests to verify changes
• No new PII added or SDK only sends newly added PII if sendDefaultPII is enabled
• I updated the docs if needed.
• I updated the wizard if needed.
• All tests passing
• No breaking changes

🔮 Next steps

🤖 Generated with Claude Code

[github-actions]

Semver Impact of This PR

⚪ None (no version bump detected)

📋 Changelog Preview

This is how your changes will appear in the changelog.
Entries from this PR are highlighted with a left border (blockquote style).

---

• ci: Integrate Warden for AI-powered PR code review by antonis in #6003

• fix(core): Fix sourcemap upload when withSentry is used programmatically by antonis in #6006
• feat(tracing): Implement strict trace continuation by antonis in #5829
• chore(deps): bump follow-redirects from 1.15.11 to 1.16.0 by dependabot in #6004
• chore: Bump sample app to React Native 0.85.1 by antonis in #5991
• chore(deps): Bump E2E tests to 0.85.1 by antonis in #5990
• Add deeplinkIntegration for automatic deep link breadcrumbs by alwx in #5983
• fix(core): Retry native module resolution to prevent silent event drops by antonis in #5981
• feat(core): Name navigation spans using dispatched action payload by alwx in #5982
• ci: Gate size analysis on ready-to-merge label for PRs by antonis in #5963
• chore(deps): update Android SDK to v8.38.0 by github-actions in #5971
• chore(deps): update Sentry Android Gradle Plugin to v6.4.0 by github-actions in #5974
• chore(deps): update Cocoa SDK to v9.10.0 by github-actions in #5972
• chore(deps): update JavaScript SDK to v10.48.0 by github-actions in #5975
• chore(deps): bump actions/github-script from 8 to 9 by dependabot in #5980
• chore(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1 by dependabot in #5979
• chore(deps): update Bundler Plugins to v5.2.0 by github-actions in #5968
• chore(deps): bump axios from 1.13.5 to 1.15.0 by dependabot in #5978
• chore(deps): bump addressable from 2.8.7 to 2.9.0 in /performance-tests by dependabot in #5969
• chore(deps): bump basic-ftp from 5.2.0 to 5.2.2 by dependabot in #5977
• fix(profiling): Fix app start transaction profile timestamp offset by antonis in #5962
• fix(android): Use componentStack as fallback for missing error stack traces by antonis in #5965
• chore(deps): bump addressable from 2.8.7 to 2.9.0 in /samples/react-native-macos by dependabot in #5967
• chore(deps): bump addressable from 2.8.7 to 2.9.0 in /samples/react-native by dependabot in #5966

Plus 14 more

---

_{🤖 This preview updates automatically when you update the PR.}

[github-actions]

	Fails
🚫	Pull request is not ready for merge, please add the "ready-to-merge" label to the pull request

Generated by 🚫 dangerJS against e47693c

[linear-code]

RN-585 Integrate Warden for AI-powered PR code review