chore: update cagent-action to v1.4.1

Signed-off-by: derekmisler <[email protected]>

Author: derekmisler

.github/workflows/pr-review.yml

@@ -31,7 +31,7 @@ jobs:
        (github.event_name == 'pull_request_review_comment' &&
         contains(fromJSON('["OWNER","MEMBER","COLLABORATOR"]'), github.event.comment.author_association))) &&
       !endsWith(github.actor, '[bot]')
-    uses: docker/cagent-action/.github/workflows/review-pr.yml@3a12dbd0c6cd7dda3d4e05f24f0143c9701456de # v1.2.13
+    uses: docker/cagent-action/.github/workflows/review-pr.yml@d98096f432f2aea5091c811852c4da804e60623a # v1.4.1
     secrets:
       ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
       CAGENT_ORG_MEMBERSHIP_TOKEN: ${{ secrets.CAGENT_ORG_MEMBERSHIP_TOKEN }}
@@ -42,3 +42,4 @@ jobs:
       pull-requests: write # to post review comments
       issues: write        # to reply to issue/PR comments
       checks: write        # to update check statuses
+      id-token: write # Required for OIDC authentication to AWS Secrets Manager