ci: bump AI review workflow to v0.3.1

[zhongkechen]

Summary

• Pin the reusable AI PR review workflow to commit d6b017da14385908951d23e26c790b28a4e5f9f0 (v0.3.1).
• Explicitly set run-claude: false so Claude AI review remains disabled.

Testing

• git diff --check
• Parsed .github/workflows/ai-pr-review.yml with PyYAML

[github-actions]

Claude AI review

This PR only touches .github/workflows/ai-pr-review.yml, bumping the pinned commit SHA for the reusable aws/aws-durable-execution-ci/.github/workflows/ai-pr-review.yml workflow (from 8de63fa6... to d6b017da...) and adding an explicit run-claude: false input.

Review notes:

• Both the old and new referenced SHAs are well-formed 40-character hex strings, and the new SHA matches what's quoted in the PR description, so there's no truncation/typo in the pin.
• The workflow continues to pin the reusable workflow to an exact commit SHA (not a mutable tag), which is the correct supply-chain-security pattern for a pull_request_target workflow that runs with contents: write, id-token: write, pull-requests: write, and secrets: inherit.
• The added run-claude: false line is indented consistently with the existing with: block (6 spaces, sibling of prompt-path), so the YAML structure is valid.
• This is a config-only change with no core/testing/otel/examples package code touched, so none of the durable-execution correctness, replay-determinism, or public API concerns apply here.

No functional defects found in the diff. Residual risk is limited to items that can't be verified without network/CI access in this sandbox: (1) whether the new commit SHA truly corresponds to the v0.3.1 release of the external reusable workflow and (2) whether that workflow version actually accepts a run-claude input — both would only surface once the workflow is actually invoked by GitHub Actions. No test changes are included, which is appropriate since this is a CI configuration change rather than SDK code.

Reviewed commit cc004292574e18019de1fcca33e3916ee8afa582. Workflow run

[github-actions]

Codex AI review

No actionable findings. Residual risk: the newly pinned reusable workflow and its run-claude input contract were not exercised by this configuration-only change.

Reviewed commit cc004292574e18019de1fcca33e3916ee8afa582. Workflow run