test(docs): validate reviewer surface links

[stacknil]

Summary

• extend the reviewer route validator to link-check Markdown across the reviewer surface
• keep the stricter reviewer-route contract checks for the six core route documents
• document the broader reviewer-surface link coverage in the SBOM reviewer path

Validation

• python scripts\validate-reviewer-routes.py
• python -m py_compile scripts\validate-reviewer-routes.py
• git diff --cached --check
• git ls-files --eol -- scripts/validate-reviewer-routes.py tools/sbom-diff-and-risk/docs/reviewer-path.md

Privacy

• changed-file diff scanned for sensitive path, identity, and secret patterns

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8272e96bc7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Restrict link checks to reviewer files

Because this walks every *.md on disk under tools/sbom-diff-and-risk and projects, the validator now includes local/generated directories as well as checked-in docs. In a common local setup where a developer creates a project-local .venv or other generated tree under one of these roots, the documented python scripts/validate-reviewer-routes.py command can fail on third-party or generated README links that are not part of the reviewer surface. Consider deriving the list from tracked files or excluding hidden/build/virtualenv directories.

Useful? React with 👍 / 👎.