fix(validate-pr): Address review feedback

- Paginate comment listing in enforce-draft.js to handle PRs with 30+
  comments
- Add null check on comment user property for deleted/suspended accounts
- Clarify in README that maintainers are only exempt from issue validation,
  not draft enforcement

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: stephanie-anderson

validate-pr/README.md

@@ -7,7 +7,7 @@ Validates non-maintainer pull requests against contribution guidelines.
 1. **Validates issue references** — Non-maintainer PRs must reference a GitHub issue where the PR author and a maintainer have discussed the approach. PRs that don't meet this requirement are automatically closed with a descriptive comment.
 2. **Enforces draft status** — All PRs must start as drafts. Non-draft PRs are automatically converted and labeled.
 
-Maintainers (users with `admin` or `maintain` role) are exempt from all checks.
+Maintainers (users with `admin` or `maintain` role) are exempt from the issue reference validation. Draft enforcement applies to everyone.
 
 ## Usage
 

validate-pr/scripts/enforce-draft.js

@@ -20,12 +20,13 @@ module.exports = async ({ github, context, core }) => {
   });
 
   // Check for existing bot comment to avoid duplicates on reopen
-  const comments = await github.rest.issues.listComments({
+  const comments = await github.paginate(github.rest.issues.listComments, {
     ...repo,
     issue_number: pullRequest.number,
+    per_page: 100,
   });
-  const botComment = comments.data.find(c =>
-    c.user.type === 'Bot' &&
+  const botComment = comments.find(c =>
+    c.user?.type === 'Bot' &&
     c.body.includes('automatically converted to draft')
   );
   if (botComment) {