# GRM-165: Adopt spec-driven CI gates and pr-review skill

## Problem
grm uses the old `devx.ci.pr_review` CI step and lacks the new spec-driven
CI gates (validate_spec, check_pr_size). It also needs a create_dependency_pr
step in post-merge to auto-create infra PRs when grm publishes a new version.

## Approach
Replace pr_review CI steps with validate_spec + check_pr_size + curl-based
APPROVE. Add create_dependency_pr step to post-merge. Add the spec-driven-
development and pr-review skills. Update AGENTS.md.

REQ-1: Replace pr_review CI steps with validate_spec + check_pr_size + curl-based APPROVE
REQ-2: Add create_dependency_pr step to post-merge for auto-creating infra PR to bump grm version
REQ-3: Add spec-driven-development and pr-review skills under `.devin/skills/`
REQ-4: Update AGENTS.md to document spec-driven development workflow and pr-review skill

## Test Plan
- Verify CI workflow YAML passes actionlint
- Verify post-merge.yml includes create_dependency_pr step with correct DEVX_TASK_PREFIX (GRM)
- Verify validate_spec and check_pr_size steps reference correct DEVX_TASK_PREFIX (GRM)

## Deploy Plan
- Merge to master via auto-merge workflow
- Post-merge workflow handles release + publish + dependency PR automatically

## Rollback Plan
- Revert the merge commit; CI reverts to pr_review-based workflow

## Acceptance Criteria
- [x] REQ-1: CI workflow uses validate_spec + check_pr_size + curl APPROVE instead of pr_review
- [x] REQ-2: post-merge.yml includes create_dependency_pr step targeting oblachno/infra with package grm
- [x] REQ-3: `.devin/skills/spec-driven-development/SKILL.md` and `.devin/skills/pr-review/SKILL.md` exist
- [x] REQ-4: AGENTS.md documents spec-driven development workflow and pr-review skill