Consider issue comments over commit comments

[klutchell]

Commit comments are not obvious in the PR timeline and need to be pointed out for better UX.

Upon clicking on the tiny comment emoji, you are brought to the commit view for approval.

Another approach would be to comment directly on the PR and reference the commit SHA and workflow run.

A compromise may be to keep the commit comment, but also add a pointer comment on the PR itself referencing the latest commit requiring review. This comment would be updated automatically to point to the new commit.

All approaches need to be inspected for possible TOCTOU attacks.