Extract Contributor+ membership check into composite action

Adds .github/actions/composite/isContributorPlus so other workflows can
reuse the team-membership lookup. claude-review.yml now calls the
composite action and reads its IS_CPLUS output instead of inlining the
gh api call.

Made-with: Cursor

Author: mountiny

.github/actions/composite/isContributorPlus/action.yml

@@ -0,0 +1,33 @@
+name: Is Contributor+
+description: Check whether a GitHub user is a member of the Expensify/contributor-plus team. Sets IS_CPLUS=true when the user is a member, IS_CPLUS=false otherwise.
+
+inputs:
+  USERNAME:
+    description: The GitHub login of the user to check.
+    required: true
+  OS_BOTIFY_TOKEN:
+    description: OSBotify token. Needed to read team memberships (the default GITHUB_TOKEN lacks the read:org scope).
+    required: true
+
+outputs:
+  IS_CPLUS:
+    description: "'true' if the user is a member of Expensify/contributor-plus, 'false' otherwise."
+    value: ${{ steps.check.outputs.IS_CPLUS }}
+
+runs:
+  using: composite
+  steps:
+    - name: Check Contributor+ membership
+      id: check
+      shell: bash
+      env:
+        GH_TOKEN: ${{ inputs.OS_BOTIFY_TOKEN }}
+        USERNAME: ${{ inputs.USERNAME }}
+      run: |
+        if gh api "/orgs/Expensify/teams/contributor-plus/memberships/$USERNAME" --silent; then
+          echo "::notice::✅ $USERNAME is a Contributor+ member"
+          echo "IS_CPLUS=true" >> "$GITHUB_OUTPUT"
+        else
+          echo "::notice::$USERNAME is not a Contributor+ member"
+          echo "IS_CPLUS=false" >> "$GITHUB_OUTPUT"
+        fi

.github/workflows/claude-review.yml

@@ -29,19 +29,17 @@ jobs:
     outputs:
       IS_CPLUS: ${{ steps.check.outputs.IS_CPLUS }}
     steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          fetch-depth: 1
+
       - name: Check Contributor+ membership
         id: check
-        env:
-          GH_TOKEN: ${{ secrets.OS_BOTIFY_TOKEN }}
-          REVIEWER: ${{ github.event.review.user.login }}
-        run: |
-          if gh api "/orgs/Expensify/teams/contributor-plus/memberships/$REVIEWER" --silent; then
-            echo "::notice::✅ Reviewer $REVIEWER is a Contributor+ member"
-            echo "IS_CPLUS=true" >> "$GITHUB_OUTPUT"
-          else
-            echo "::notice::Reviewer $REVIEWER is not a Contributor+ member; skipping Claude review"
-            echo "IS_CPLUS=false" >> "$GITHUB_OUTPUT"
-          fi
+        uses: ./.github/actions/composite/isContributorPlus
+        with:
+          USERNAME: ${{ github.event.review.user.login }}
+          OS_BOTIFY_TOKEN: ${{ secrets.OS_BOTIFY_TOKEN }}
 
   review:
     needs: [validate, checkCPlusApproval]