chore(deps): bump Factory-AI/droid-action from 5 to 6

[dependabot]

Bumps Factory-AI/droid-action from 5 to 6.

Release notes

Sourced from Factory-AI/droid-action's releases.

v6

What's Changed

GitLab: review posting moved into CI

• MR review comments are now posted through the GitLab REST API by CI instead of a gitlab_mr MCP server the model had to call itself (#109)
  • Both review passes run with no MR write tool and with GITLAB_TOKEN stripped from their environment, so a prompt-injected diff has neither a tool nor a credential to write to the project
  • review_validated.json is the contract: a new gitlab-post-review step posts every approved finding as an inline MR discussion, and every proposal/approval/API result is replayable from the .droid-debug/ artifacts

GitLab: org-wide review guidelines

• New org_guidelines_source component input applies one set of custom review guidelines across every project in a group (#110)
  • Accepts a local file path, an http(s) URL, a git clone URL, or a GitLab project path (with org_guidelines_ref / org_guidelines_path for git sources)
  • Installed as a user-level skill so it can never shadow a project's own review-guidelines skill; unreachable sources log a warning and the review proceeds

Full Changelog: Factory-AI/droid-action@v5...v6

Commits

• 2041e7c Merge pull request #107 from Factory-AI/dev
• 4028e0a Merge pull request #106 from Factory-AI/nizar/model-policy-fallback
• 3a9aaeb feat(review): fall back on invalid model ids and condense model-list error dumps
• 98bf871 fix(review): strip stale review/security progress text from the final trackin...
• 52c8513 feat(review): fall back gracefully when the org model policy blocks the selec...
• 49188f4 Merge pull request #105 from Factory-AI/dev
• 602ad67 Merge pull request #104 from Factory-AI/nizar/review-retry-resilience
• 7777747 Merge branch 'dev' into nizar/review-retry-resilience
• 2402a6b Apply PR review fixes: harden retry/validation, redact secrets
• 6db77fe fix(review): replace unsupported ternary in DROID_SUCCESS expression
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)