Merge pull request #8 from ducpm2303/fix/plugin-manifest-invalid-commands

fix: add id-token: write permission for claude-code-action OIDC auth

Author: ducpm2303

.github/workflows/pr-review.yml

@@ -18,6 +18,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
+      id-token: write
     steps:
       - uses: actions/checkout@v4
         with: