chore(claude): allowlist actionlint + browser get_page_text (read-only) (#92)

Follow-up to #88 (read-only permission allowlist, merged). A second
`/fewer-permission-prompts` pass over the 50 most-recent transcripts
(2,132 Bash calls) surfaced two more repeated, read-only,
not-already-allowed, non-arbitrary-execution entries:

| Pattern | Count | Notes |
|---------|-------|-------|
| `Bash(actionlint *)` | 16 | GitHub Actions workflow linter — pure
static analysis, no execution; heavily used by the ongoing CI/CD cleanup
campaign |
| `mcp__claude-in-chrome__get_page_text` | 3 | read-only page-text read
|

Deliberately excluded (same discipline as #88): mutation (`rm`, `git
add/commit/push`, `cp`, `mkdir`, `chmod`), arbitrary execution
(`python3`, `awk`, `bash`, `powershell.exe`, `idris2`, `zig`, `just`,
`curl`), and `asciidoctor *` (it *writes* rendered output — only the
already-listed `asciidoctor --version` is read-only).

Base `.claude/settings.json` already carried the three #88 entries; this
adds two, no removals.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Author: hyperpolymath

.claude/settings.json

@@ -3,7 +3,9 @@
     "allow": [
       "Bash(uuidgen *)",
       "Bash(git ls-tree *)",
-      "Bash(asciidoctor --version)"
+      "Bash(asciidoctor --version)",
+      "Bash(actionlint *)",
+      "mcp__claude-in-chrome__get_page_text"
     ]
   }
 }