Summary\n- Configure CNB PR AI review using the official cnbcool/code-review:latest plugin.\n- Set AI review model to glm-5.\n- Add specs/issue-12-ai-review.md for the design record.\n- Keep PR pipelines validation-only; no Docker artifact push happens in PR builds.\n\n## Configuration\n- model: glm-5\n- comment: true\n- max_comments: 10\n- fail_on_critical: false\n\nReference: https://docs.cnb.cool/zh/build/showcase/ai-review.html\n\n## Validation\n- node /Users/wwyz/.codex/skills/cnb-skill/cnb-pipeline/validator/validate.js .cnb.yml\n- go test ./...\n\n## Branch Model\nDevelopment PR into dev. Release to main, deployment, Release creation, and Issue closure require explicit user confirmation.\n\nRef #12