Add author_association and PR-only guards to assist job

- Restrict @claude to trusted authors (author_association != NONE)
- Only trigger on PR comments, not regular issues
  (check github.event.issue.pull_request)

Co-authored-by: Isaac

Author: shreyas-goenka

.github/workflows/claude-code.yml

@@ -51,12 +51,13 @@ jobs:
         env:
           GH_TOKEN: ${{ steps.token.outputs.token }}
 
-  # Interactive @claude mentions.
+  # Interactive @claude mentions (PRs only, trusted authors only).
   assist:
     if: |
       github.event.comment.user.type != 'Bot' &&
+      github.event.comment.author_association != 'NONE' &&
       (
-        (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+        (github.event_name == 'issue_comment' && github.event.issue.pull_request && contains(github.event.comment.body, '@claude')) ||
         (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude'))
       )
     runs-on: