Add ethics-gate workflow for PR reviews

[RamGcia]

This workflow automates the ethics review process for pull requests by posting a questionnaire and evaluating comments for risk assessment.

[raymondchoy14]

All good

[github-actions]

Ethics & Regulatory Questionnaire
This PR cannot be merged until this form is completed.

Please reply to this comment and answer all questions below (you can copy-paste and fill it).

1. Does this change involve any of the following? (check all that apply)

   • Training or fine-tuning of AI/ML models
   • Inference/serving of AI/ML models in production
   • Processing of personal data (PII, health, biometric, financial, children’s data, etc.)
   • Dual-use or military-applicable technology
   • Safety-critical systems (medical device, aviation, automotive, etc.)
   • High-impact algorithmic decision-making (credit, hiring, criminal justice, etc.)
   • None of the above (pure docs, tests, CI, formatting, etc.)

2. Estimated risk level (your honest assessment)

   • Low – no ethical or regulatory impact
   • Medium – possible fairness/privacy concerns
   • High – potential for serious harm or legal non-compliance

3. Brief description of any ethical/regulatory impact (or write “None”)

4. Relevant regulations / standards considered (e.g., EU AI Act, GDPR, HIPAA, NIST AI RMF, export controls, etc.)
   List them or write “N/A”

5. Have mitigation measures been implemented (bias testing, data minimization, consent flows, etc.)?

   • Yes → describe below
   • No
   • Not applicable

Thank you! The ethics gate will evaluate your answers automatically.

[RamGcia]

Ethics & Regulatory Questionnaire This PR cannot be merged until this form is completed.

Please reply to this comment and answer all questions below (you can copy-paste and fill it).

1. Does this change involve any of the following? (check all that apply)
   
   * [ ]  Training or fine-tuning of AI/ML models
   * [ ]  Inference/serving of AI/ML models in production
   * [ ]  Processing of personal data (PII, health, biometric, financial, children’s data, etc.)
   * [ ]  Dual-use or military-applicable technology
   * [ ]  Safety-critical systems (medical device, aviation, automotive, etc.)
   * [ ]  High-impact algorithmic decision-making (credit, hiring, criminal justice, etc.)
   * [x]  None of the above (pure docs, tests, CI, formatting, etc.)

2. Estimated risk level (your honest assessment)
   
   * [x]  Low – no ethical or regulatory impact
   * [ ]  Medium – possible fairness/privacy concerns
   * [ ]  High – potential for serious harm or legal non-compliance

3. Brief description of any ethical/regulatory impact (or write “None”)
   > None

4. Relevant regulations / standards considered (e.g., EU AI Act, GDPR, HIPAA, NIST AI RMF, export controls, etc.)
   List them or write “N/A”
   > N/A

5. Have mitigation measures been implemented (bias testing, data minimization, consent flows, etc.)?
   
   * [x]  Yes → describe below
   * [ ]  No
   * [ ]  Not applicable
   
   > test

Thank you! The ethics gate will evaluate your answers automatically.

[raymondchoy14]

All good