* ci: verify pull requests once and document delivery

* ci: bind review decisions to the captured PR revision

* ci: recheck the reviewed base before merging a PR

---------

Co-authored-by: Lucenx9 <185146821+Lucenx9@users.noreply.github.com>