fix: add --comment flag and --allowedTools to Claude review workflow

The code-review plugin defaults to terminal output without --comment,
so reviews were silently discarded in CI. Additionally, Bash commands
(gh CLI, git) are not auto-allowed by the action and need explicit
--allowedTools to function.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: ovitrif

.github/workflows/claude-code-review.yml

@@ -50,6 +50,6 @@ jobs:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
           plugins: 'code-review@claude-code-plugins'
-          prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
-          # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
-          # or https://code.claude.com/docs/en/cli-reference for available options
+          prompt: '/code-review:code-review --comment ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
+          claude_args: |
+            --allowedTools "Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh api:*),Bash(git log:*),Bash(git diff:*),Bash(git blame:*),Read,Glob,Grep"