ci(warden): Preserve base config in report mode (#194)

Pass the org base Warden config to the report step so split analyze/report runs replay findings against the same trigger set. Without this, report mode can reject findings produced by the analyze step when repo-local config does not include the org baseline skill.

Co-authored-by: GPT-5 <noreply@anthropic.com>

Author: dcramer

.github/workflows/warden.yml

@@ -59,6 +59,7 @@ jobs:
           mode: report
           findings-file: ${{ steps.warden-analyze.outputs.findings-file }}
           github-token: ${{ steps.app-token.outputs.token }}
+          base-config-path: .warden-org/warden.toml
 
       - name: Authenticate to Google Cloud
         if: ${{ always() && steps.warden-analyze.outputs.findings-file != '' }}