general-pr-review: declare ANTHROPIC_API_KEY for workflow_call (#120)

The workflow_call block declared no secrets, so a caller could only
reach ANTHROPIC_API_KEY through secrets: inherit, which forwards every
secret the calling repository can see. Declaring it lets callers pass
that one secret instead.

No behaviour change for existing consumers. The managed-repository
ruleset runs this workflow against each repo through its own
pull_request trigger rather than workflow_call, so the declaration is
inert there and the secret keeps resolving from the org secret. A code
search across ConductorOne and ductone finds no workflow_call references
to this file today.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: jugonzalez12

.github/workflows/general-pr-review.yaml

@@ -1,7 +1,10 @@
 on:
   pull_request:
     types: [opened, reopened, synchronize, ready_for_review]
-  workflow_call: {}
+  workflow_call:
+    secrets:
+      ANTHROPIC_API_KEY:
+        required: true
 concurrency:
   group: general-pr-review-${{ github.workflow_ref }}-${{ github.event.pull_request.number || github.run_id }}
   cancel-in-progress: true