ci: add the apify-factory review workflow

[apify-service-account]

Lets apify-factory review pull requests here and approve the trivial ones.

• Requesting apify-factory as a reviewer runs an AI review; when every gate passes, the review finds nothing and a second model agrees, it approves instead of commenting.
• A push that changes the code, removing the request, or going back to draft withdraws the bot's own approval.
• This repository's factory_auto_approve property is true, which is what allows approvals, and mtrunkat becomes the code owner of the workflow file.
• These paths are never auto-approved here, on top of the defaults every repository has. An agent proposed them from the repository's layout; edit the list in the workflow like any other code.

Path	Why	Files
impit-node/index.js	Native-binding loader auto-generated by NAPI-RS during napi build; it should change only by regenerating, never by hand edits.	1
impit-node/index.d.ts	TypeScript declarations auto-generated by NAPI-RS from the Rust bindings; hand edits drift from the real native interface and must go through the generator.	1

Refs https://github.com/apify/ai-developer/blob/main/actions/auto-approve/README.md