ci(review): count the legacy FAILs file as read through generated-data

.github/workflows/pr-review-hosted.yml

@@ -243,6 +243,8 @@ jobs:
       # Copies scripts/sync-shared-copies.sh generates, read at the merge base:
       # identical changes to copies of one source are read once, hooks included.
       generated-copies: scripts/shared-copies.txt
+      # Generated data files counted as read, read at the merge base.
+      generated-data: scripts/review-generated-data.txt
       # A hold adds this label and a `claude-lane-hold` marker comment; ci-status
       # fails while the label is on. The review holds only for a real-charge
       # cost or a CRITICAL security finding; hold-paths names the files the

.github/workflows/pr-review-security-hosted.yml

@@ -243,6 +243,8 @@ jobs:
       # Copies scripts/sync-shared-copies.sh generates, read at the merge base:
       # identical changes to copies of one source are read once, hooks included.
       generated-copies: scripts/shared-copies.txt
+      # Generated data files counted as read, read at the merge base.
+      generated-data: scripts/review-generated-data.txt
       # A hold adds this label and a `claude-lane-hold` marker comment; ci-status
       # fails while the label is on. The review holds only for a real-charge
       # cost or a CRITICAL security finding; hold-paths names the files the

scripts/review-generated-data.txt

@@ -0,0 +1,7 @@
+# Generated data files the review lanes count as read without reading them,
+# read at the merge base (ci-workflows pr-review-cli.yml `generated-data`).
+# One repo-relative path per line. A listed file's loader checks its structure
+# only, never its content, so a path stays listed only while the one commit that
+# adds the file lands, and is removed once that commit is on main; later edits
+# are then reviewed in full.
+plugins/source-control/skills/babysit-prs/scripts/verify-legacy-fails.json