github.onDeploymentReviewRejected subscribes to rejected deployment reviews.
automations/watch-github-deployment-review-rejected.automation.ts
account defaults to the project binding. Returns typed GitHub deployment_review payloads with action: "rejected". Requires Deployments read permission and repository access.