A repository uses three agent jobs: planner, implementer, and reviewer. The team wants a final audit job to run after all three jobs, collect the audit files, and publish a retained artifact that reviewers can download from the workflow run. Which option completes the workflow?

name: multi-agent-audit

on:
  pull_request:
    branches:
      - main

permissions:
  contents: read
  actions: read
  pull-requests: read

jobs:
  planner:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: |
           mkdir -p audit
           echo "planner decision log" > audit/planner.md
      - uses: actions/upload-artifact@v4
        with:
           name: planner-audit
           path: audit/planner.md

   implementer:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - run: |
            mkdir -p audit
            echo '{"files_changed":["src/api.ts"]}' > audit/implementer.json
       - uses: actions/upload-artifact@v4
         with:
            name: implementer-audit
            path: audit/implementer.json

   reviewer:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
       - run: |
            mkdir -p audit
            echo "review findings" > audit/reviewer.md
       - uses: actions/upload-artifact@v4
         with:
            name: reviewer-audit
            path: audit/reviewer.md

   audit_bundle:
     (Missing value 1)
     runs-on: ubuntu-latest
     (Missing value 2)
     steps:
       - uses: actions/download-artifact@v4
         with:
            path: audit/raw

         - name: Build audit index
           run: |
             find audit/raw -type f | sort > audit/index.txt

         - name: Publish audit bundle
           (Missing value 3)
           with:
             name: multi-agent-audit-${{ github.run_id }}
             path: audit/
             retention-days: 30