Fix Claude code review workflow authentication and bot handling (#11)

* Fix Claude code review workflow authentication

Add github_token to claude-code-action to fix authentication error. The workflow was failing with "User does not have write access on this repository" because it was trying to use OIDC token exchange without proper GitHub App permissions. Using the standard GITHUB_TOKEN secret resolves this.

* Skip Claude code review workflow for bot-created PRs

Add conditional check to prevent workflow from running on PRs created by Copilot or other bots. The workflow was failing with "Copilot is not a user" error because the claude-code-action tries to check permissions for the PR author, and bot users like "Copilot" are not recognized as valid GitHub users by the collaborators API.

The workflow will now only run for PRs created by human users.

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: bedaHovorka <5263405+bedaHovorka@users.noreply.github.com>

Author: Copilot

.github/workflows/claude-code-review.yml

@@ -12,11 +12,10 @@ on:
 
 jobs:
   claude-review:
-    # Optional: Filter by PR author
-    # if: |
-    #   github.event.pull_request.user.login == 'external-contributor' ||
-    #   github.event.pull_request.user.login == 'new-developer' ||
-    #   github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
+    # Skip workflow for bot PRs (Copilot, Dependabot, etc.)
+    if: |
+      github.event.pull_request.user.login != 'Copilot' &&
+      github.event.pull_request.user.type != 'Bot'
 
     runs-on: ubuntu-latest
     permissions:
@@ -36,6 +35,7 @@ jobs:
         uses: anthropics/claude-code-action@v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
           prompt: |
             REPO: ${{ github.repository }}
             PR NUMBER: ${{ github.event.pull_request.number }}