chore: add cubic config

[alx-xo]

Summary

• Adds cubic.yaml to the repo root to configure AI-powered code review behavior
• Enables high-sensitivity reviews with incremental commit checks, ignoring SVGs, dist, docs, and snapshot files
• Configures custom rule to flag security vulnerabilities and enables PR description generation

Test Plan

• Verify cubic.yaml is valid by checking schema at https://cubic.dev/schema/cubic-repository-config.schema.json
• Confirm Cubic picks up the config on next PR

🤖 Generated with Claude Code

---

Summary by cubic

Add cubic.yaml to configure Cubic code review. Enables high-sensitivity, incremental reviews, auto PR descriptions, and label-based skip rules while ignoring non-source files.

• New Features
  • High-sensitivity reviews with incremental commit checks; drafts not checked; merge confidence summary enabled.
  • Auto-approve disabled; external contributors require manual review; addressed threads auto-resolve.
  • Ignore: **/*.svg, docs/, and tests/visual/storybook.visual.spec.ts-snapshots/; skip PRs labeled wip or skip-review.
  • Security rule flags secrets, SQLi/XSS, enforces HTTPS, and requires org/project scoping to prevent IDOR; PR descriptions include a Cubic link with quick-fix buttons enabled.

^{Written for commit ee874f7. Summary will update on new commits.}

[cubic-dev-ai]

No issues found across 1 file

_{Re-trigger cubic}