Configure Claude GitHub Actions workflow

- Remove automatic code review workflow to avoid unnecessary token usage
- Clean up claude.yml by removing commented configuration options
- Enable Claude Opus 4 model and sticky comments
- Add Bazel setup step for proper toolchain access
- Allow essential bash commands: bazelisk, git, find, grep, cat, and version updates

Manual reviews are still available via @claude mentions in PR comments.

Author: mxpv

.github/workflows/claude-code-review.yml

@@ -30,35 +30,21 @@ jobs:
         with:
           fetch-depth: 1
 
+      - name: Setup Bazel
+        uses: bazel-contrib/setup-bazel@0.15.0
+        with:
+          bazelisk-cache: true
+          disk-cache: ${{ github.workflow }}
+          repository-cache: true
+
       - name: Run Claude Code
         id: claude
         uses: anthropics/claude-code-action@beta
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-
-          # This is an optional setting that allows Claude to read CI results on PRs
           additional_permissions: |
             actions: read
-          
-          # Optional: Specify model (defaults to Claude Sonnet 4, uncomment for Claude Opus 4)
-          # model: "claude-opus-4-20250514"
-          
-          # Optional: Customize the trigger phrase (default: @claude)
-          # trigger_phrase: "/claude"
-          
-          # Optional: Trigger when specific user is assigned to an issue
-          # assignee_trigger: "claude-bot"
-          
-          # Optional: Allow Claude to run specific commands
-          # allowed_tools: "Bash(npm install),Bash(npm run build),Bash(npm run test:*),Bash(npm run lint:*)"
-          
-          # Optional: Add custom instructions for Claude to customize its behavior for your project
-          # custom_instructions: |
-          #   Follow our coding standards
-          #   Ensure all new code has tests
-          #   Use TypeScript for new files
-          
-          # Optional: Custom environment variables for Claude
-          # claude_env: |
-          #   NODE_ENV: test
+          model: "claude-opus-4-20250514"
+          use_sticky_comment: true
+          allowed_tools: "Bash(bazelisk *),Bash(git *),Bash(python tools/update_versions.py),Bash(find *),Bash(grep *),Bash(cat *)"