ci: add Slack notification for maintainer PRs

Add a notify job to the CI workflow that posts to Slack when an MCP team
member opens a non-draft PR and CI passes. A random reviewer from a
configured pool is tagged for review.

Requires two repo secrets:
- MAINTAINER_MAP: JSON with triggers (team members) and reviewers (notification pool)
- SLACK_WEBHOOK_URL: Slack workflow webhook URL

Author: felixweinberger

.github/workflows/main.yml

@@ -22,3 +22,47 @@ jobs:
       - uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
         with:
           jobs: ${{ toJSON(needs) }}
+
+  notify:
+    name: Notify maintainers
+    runs-on: ubuntu-latest
+    needs: [all-green]
+    if: >-
+      github.event_name == 'pull_request' &&
+      !github.event.pull_request.draft &&
+      needs.all-green.result == 'success'
+    permissions: {}
+    steps:
+      - name: Notify Slack
+        env:
+          MAINTAINER_MAP: ${{ secrets.MAINTAINER_MAP }}
+          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          PR_NUMBER: ${{ github.event.pull_request.number }}
+          PR_TITLE: ${{ github.event.pull_request.title }}
+          PR_AUTHOR: ${{ github.event.pull_request.user.login }}
+        run: |
+          # Check if PR author is on the team (triggers list)
+          if ! echo "$MAINTAINER_MAP" | jq -e --arg author "$PR_AUTHOR" '.triggers | index($author)' > /dev/null 2>&1; then
+            echo "PR author $PR_AUTHOR is not on the team, skipping notification"
+            exit 0
+          fi
+
+          # Pick a random reviewer (excluding the PR author)
+          OTHERS=$(echo "$MAINTAINER_MAP" | jq -r --arg author "$PR_AUTHOR" '[.reviewers | keys[] | select(. != $author)] | .[]')
+          OTHERS_ARRAY=($OTHERS)
+          if [ ${#OTHERS_ARRAY[@]} -eq 0 ]; then
+            echo "No other reviewers to notify"
+            exit 0
+          fi
+          REVIEWER=${OTHERS_ARRAY[$((RANDOM % ${#OTHERS_ARRAY[@]}))]}
+
+          SLACK_ID=$(echo "$MAINTAINER_MAP" | jq -r --arg user "$REVIEWER" '.reviewers[$user].slack // empty')
+
+          # Post to Slack (if reviewer has a Slack ID)
+          if [ -n "$SLACK_ID" ] && [ -n "$SLACK_WEBHOOK_URL" ]; then
+            SLACK_TEXT="${PR_URL} \"${PR_TITLE}\" by ${PR_AUTHOR}"
+            curl -sf -X POST "$SLACK_WEBHOOK_URL" \
+              -H 'Content-Type: application/json' \
+              -d "$(jq -n --arg text "$SLACK_TEXT" --arg user_id "$SLACK_ID" '{text: $text, user_id: $user_id}')" || echo "::warning::Slack notification failed"
+          fi