That review belongs to the old commit

An agent asks Copilot for review through the new API, changes the code, then someone reads the old review as if it covers the new patch. That’s the annoying case I’d want the workflow to prevent.

Tie the review to the commit, otherwise we’ve just automated some confusion.