chore: allow Claude Code reviews on fork PRs

Use pull_request_target for auto-reviews so the workflow runs in the
base repo context with access to secrets, while safely checking out
only the base branch. Remove fork restrictions from the interactive
workflow since those events already run in the base repo context.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: natemcmaster

.github/workflows/claude-code-review.yml

@@ -1,13 +1,11 @@
 name: Claude Code Review
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize]
 
 jobs:
   claude-review:
-    # Only run on PRs from branches in the same repository, not from forks
-    if: github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     permissions:
       contents: read

.github/workflows/claude.yml

@@ -18,10 +18,6 @@ jobs:
         (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
         (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
         (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
-      ) && (
-        github.event_name == 'issues' ||
-        github.event_name == 'issue_comment' ||
-        github.event.pull_request.head.repo.full_name == github.repository
       )
     runs-on: ubuntu-latest
     permissions: