feat(reusable): ship the curated swarm as the default config consumers inherit (#10)

examples/README.md

@@ -6,7 +6,7 @@ set the secrets/vars it references. Gadfly is advisory only — it never blocks
 
 | File | Backend | Needs |
 |------|---------|-------|
-| [`reusable.yml`](reusable.yml) | **slimmest stub** — calls Gadfly's reusable workflow, forwarding only the secrets the reviewer needs (least privilege, not `secrets: inherit`); take the defaults or override a few inputs | secret `OLLAMA_CLOUD_API_KEY` |
+| [`reusable.yml`](reusable.yml) | **slimmest stub** — calls Gadfly's reusable workflow and inherits its **default swarm** (3 cloud + Claude Code, 5-lens suite), forwarding only the secrets it needs (least privilege, not `secrets: inherit`); the stub keeps a cloud-only `models:` override so it runs with just the Ollama key (drop it + add the Claude token to get the full default) | secret `OLLAMA_CLOUD_API_KEY` |
 | [`adversarial-review.yml`](adversarial-review.yml) | **Ollama Cloud** (default) + inline notes for every provider; full self-contained stub | secret `OLLAMA_CLOUD_API_KEY` |
 | [`local-ollama.yml`](local-ollama.yml) | a **local/LAN Ollama** daemon | nothing (or `GADFLY_BASE_URL` for a remote host) |
 | [`openai-compatible.yml`](openai-compatible.yml) | any **OpenAI-compatible** endpoint (local Ollama `/v1`, gateway, vLLM, OpenRouter…) | `GADFLY_BASE_URL` (+ a key for most gateways) |

examples/reusable.yml

@@ -5,7 +5,12 @@
 # workflow, which holds the image pin + all the env plumbing. You only declare
 # the triggers, the comment-trigger actor gate, and any overrides you want.
 #
-# Needs: secret OLLAMA_CLOUD_API_KEY (the default Ollama Cloud provider).
+# The reusable ships a DEFAULT swarm: 3 cloud models + the Claude Code engine
+# (sonnet/opus/opus:max), 5-lens suite. That default needs BOTH
+# OLLAMA_CLOUD_API_KEY and CLAUDE_CODE_OAUTH_TOKEN. This example overrides
+# `models:` to a cloud-only set so it works with just OLLAMA_CLOUD_API_KEY —
+# delete that override (and forward the Claude token) to inherit the full default.
+#
 # Forward ONLY the secrets the reviewer uses (least privilege) — see the
 # `secrets:` block below. GITEA_TOKEN is automatic. `secrets: inherit` also works
 # but hands the reusable EVERY secret in your repo (registry/deploy/db creds the
@@ -13,9 +18,8 @@
 # Gadfly commit (not @main) so a push there can't change what runs with your
 # secrets.
 #
-# Prefer this when you're happy with the defaults. For custom named endpoints
-# (GADFLY_ENDPOINT_<NAME>) or a provider the reusable doesn't map, use the full
-# stub in adversarial-review.yml instead.
+# For custom named endpoints (GADFLY_ENDPOINT_<NAME>) or a provider the reusable
+# doesn't map, use the full stub in adversarial-review.yml instead.
 
 name: Adversarial Review (Gadfly)
 
@@ -56,7 +60,10 @@ jobs:
       # GADFLY_FINDINGS_URL:     ${{ secrets.GADFLY_FINDINGS_URL }}
       # GADFLY_FINDINGS_TOKEN:   ${{ secrets.GADFLY_FINDINGS_TOKEN }}
     with:
-      # All optional — omit to take Gadfly's defaults. Examples:
-      # models: "qwen3-coder:480b-cloud,gpt-oss:120b-cloud"
-      # specialists: "security,correctness,error-handling"
+      # Cloud-only override so this works with just OLLAMA_CLOUD_API_KEY. Delete
+      # this line (and forward CLAUDE_CODE_OAUTH_TOKEN above) to inherit the full
+      # default swarm (3 cloud + Claude Code sonnet/opus/opus:max, 5 lenses).
+      models: "minimax-m3:cloud,glm-5.2:cloud,deepseek-v4-pro:cloud"
+      # Other inputs inherit the default (5-lens suite, concurrency, 90-min cap);
+      # override any of them here (specialists, provider, base_url, timeout_secs…).
       allowed_users: "your-username"