ci: pin gadfly reusable @8eb0265 + thread dispatch pr_number [skip ci]

Gitea >= 1.27 does not propagate workflow_dispatch inputs into a called
workflow's github.event; the stub must pass pr_number as an explicit
workflow_call input or manual dispatches die at 'PR required'. Mirrors
gadfly#24.

Co-Authored-By: Claude Fable 5 <[email protected]>

.gitea/workflows/adversarial-review.yml

@@ -41,7 +41,7 @@ jobs:
     # Tracks gadfly's v1 release tag — a curated pointer re-moved on each release
     # (unlike @main, which moves on every push). Central swarm tuning propagates
     # here automatically; the tradeoff vs a full sha pin is that v1 is mutable.
-    uses: steve/gadfly/.gitea/workflows/review-reusable.yml@3664ce858da1e7ba949baf675f7f3b249b8e7998
+    uses: steve/gadfly/.gitea/workflows/review-reusable.yml@8eb0265e759e8c37ade8eaa8cb4b3aa9c7a5a169
     # Least privilege: forward only the review secrets (not `secrets: inherit`,
     # which would expose every repo secret). GITEA_TOKEN is the automatic token.
     secrets:
@@ -52,3 +52,6 @@ jobs:
     with:
       # Consumer-specific allow-list; everything else is inherited.
       allowed_users: "steve,fizi,dazed"
+      # Gitea >= 1.27 does not propagate dispatch inputs into a called workflow's
+      # github.event — thread the PR number explicitly (empty on non-dispatch events).
+      pr_number: ${{ github.event.inputs.pr_number }}