fix(ci): isolate concurrency groups by comment author

Previous fix was incomplete - both human /review comments and bot
progress comments were issue_comment events sharing the same
concurrency group.

Now includes comment author in concurrency group:
- Human: ai-review-issue_comment-kaitranntt-320
- Bot: ai-review-issue_comment-ccs-agy-reviewer[bot]-320
- PR/dispatch: ai-review-<event>-system-320

This completely isolates bot activity from human-triggered reviews.

.github/workflows/ai-review.yml

@@ -21,10 +21,12 @@ on:
         required: true
         type: string
 
-# Cancel in-progress runs for same PR + event type (prevents self-cancellation from bot comments)
+# Concurrency strategy:
-# Each event type gets its own concurrency group to prevent cross-event cancellation
+# - For issue_comment: include comment author to isolate bot progress comments from human /review requests
+# - For other events: use event_name + PR number
+# This prevents bot progress comments from cancelling active reviews
 concurrency:
-  group: ai-review-${{ github.event_name }}-${{ github.event.pull_request.number || github.event.issue.number || github.event.inputs.pr_number }}
+  group: ai-review-${{ github.event_name }}-${{ github.event.comment.user.login || 'system' }}-${{ github.event.pull_request.number || github.event.issue.number || github.event.inputs.pr_number }}
   cancel-in-progress: true
 
 jobs: