feat: add AgentCore PR reviewer example

[jesseturner21]

Summary

• replace .github/harness with a CLI-generated AgentCore project under examples/AgentCoreCliReviewer
• preserve the reviewer Dockerfile, prompts, and invocation client and update the PR review workflow path
• keep AgentCore CLI deployment state ignored and out of the repository
• add the generated CDK project and target account configuration

Validation

• npm test (6,098 passed)
• npm run format:check
• npm run secrets:check
• generated CDK npm run build and npm test -- --runInBand
• agentcore validate --json
• deployed and invoked the Harness in account 631957124172, us-east-1

Cutover note

The workflow secrets remain on the legacy Harness. The migrated Dockerfile requires CLONE_TOKEN and GITHUB_TOKEN build arguments, which the AgentCore Harness Dockerfile path does not currently expose. Cut over HARNESS_ARN and HARNESS_AWS_ROLE_ARN after deploying an authenticated image or adopting runtime secret injection.

[github-actions]

Package Tarball

aws-agentcore-0.27.0.tgz

How to install

gh release download pr-2040-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.27.0.tgz

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	40.69%	15292 / 37575
🔵	Statements	39.96%	16305 / 40802
🔵	Functions	34.88%	2617 / 7501
🔵	Branches	33.99%	10197 / 29992

Generated in workflow #4365 for commit 6306385 by the Vitest Coverage Report Action

[agentcore-devx-automation]

Claude Security Review: no high-confidence findings. (run)