ci(claude-review): allow dependabot PRs in Claude Code Review (#870)

## Summary
- Add `allowed_bots: "dependabot[bot]"` to the anthropics/claude-code-action step so Dependabot dependency PRs get reviewed instead of failing the `claude-review` check on the default non-human-actor rejection.
- Scoped to `dependabot[bot]` only (not `*`); job permissions stay read-only (contents/pull-requests/issues: read).

## Validation
- Cross-family review: opencode (zai/glm-5.2) — APPROVE, no Critical/Major findings
- Correctness: `allowed_bots` verified as a real input in the pinned action's action.yml (SHA 558b1d6); YAML valid; value is the correct Dependabot actor login
- CI: all checks green (GitGuardian, Backend/Frontend units, E2E smoke, Lint/Type)
- Feedback triage: 3 findings, all Suggestion/Nitpick — tracked as a follow-up issue

Refs failed run on #868.

Author: frankbria

.github/workflows/claude-code-review.yml

@@ -46,6 +46,9 @@ jobs:
         uses: anthropics/claude-code-action@558b1d6cab4085c7753fe402c10bef0fbb92ac7a # v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          # Allow Dependabot PRs to be reviewed (default policy rejects bot actors
+          # and fails the check on every dependency PR).
+          allowed_bots: "dependabot[bot]"
           prompt: |
             REPO: ${{ github.repository }}
             PR NUMBER: ${{ github.event.pull_request.number }}