feat(reusable): runtime-variable swarm config (cache-immune, no more re-pinning to retune) (#14)

CLAUDE.md

@@ -46,11 +46,14 @@ entrypoint.sh          container brains: trigger gating, PR clone, model loop (t
                        used to live in workflow YAML)
 Dockerfile             multi-stage; private-module creds via BuildKit secrets never reach the final image
 .gitea/workflows/build-image.yml   push main → :latest; tag v* → :<tag>+:latest; PR → build-only
-.gitea/workflows/review-reusable.yml  reusable (workflow_call) review job; ships the DEFAULT swarm as
-                       input defaults (3 cloud + Claude Code sonnet/opus/opus:max + a local 4090 Ti
-                       via llama-swap, 5-lens suite; 3 claude models concurrent / 5 lenses each, the
-                       4090 Ti 1 model × 1 lens) so consumers inherit it by omitting `with:`. Consumers subscribe
-                       with an ~8-line caller forwarding only the secrets the reviewer needs (Phase 4);
+.gitea/workflows/review-reusable.yml  reusable (workflow_call) review job; resolves swarm config at
+                       RUNTIME: consumer `with:` input → owner user-scope var (GADFLY_DEFAULT_MODELS /
+                       _SPECIALISTS / _PROVIDER_CONCURRENCY / _PROVIDER_LENS_CONCURRENCY, +
+                       GADFLY_ENDPOINT_RAGNAROS) → image default. Vars are injected per-run, so editing
+                       one var retunes the whole fleet even though long-lived act_runners CACHE this file
+                       by ref (a moved tag is NOT re-fetched — only a runtime value or a fresh @<sha>
+                       bypasses the cache). Consumers subscribe with an ~8-line caller forwarding only the
+                       secrets the reviewer needs and pinned to an immutable @<sha> (Phase 4);
                        gadfly's own adversarial-review.yml is a thin caller of it (dogfoods the path).
 examples/              copy-paste consumer stub workflows for different providers
 ```