fix: repair Claude code review workflow and disable rustfmt cron

The code-review CLI plugin silently fails in CI, burning tokens without
posting comments (anthropics/claude-code#26227). Replace with a direct
prompt that uses gh pr comment and inline comments.

Remove the weekly cron schedule from rustfmt workflow to prevent
automated PRs; keep workflow_dispatch for manual use.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: ovitrif

.github/workflows/claude-code-review.yml

@@ -1,3 +1,7 @@
+# WARNING: Do not let /install-github-app overwrite this file.
+# The auto-generated version uses the code-review CLI plugin which
+# silently fails in CI (see https://github.com/anthropics/claude-code/issues/26227).
+# This version uses a direct prompt per the official docs.
 name: Claude Code Review
 
 on:
@@ -51,8 +55,22 @@ jobs:
         uses: anthropics/claude-code-action@v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-          plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
-          plugins: 'code-review@claude-code-plugins'
-          prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
-          allowed_bots: 'claude[bot]'
-          claude_args: '--allowed-tools Bash(gh:*) WebFetch'
+          track_progress: true
+          prompt: |
+            REPO: ${{ github.repository }}
+            PR NUMBER: ${{ github.event.pull_request.number }}
+
+            Please review this pull request with a focus on:
+            - Code quality and Rust best practices
+            - Potential bugs, logic errors, or unsafe patterns
+            - Security implications (especially around cryptographic operations and Lightning/Bitcoin handling)
+            - Performance considerations
+
+            Note: The PR branch is already checked out in the current working directory.
+
+            Use `gh pr comment` for top-level feedback.
+            Use `mcp__github_inline_comment__create_inline_comment` to highlight specific code issues.
+            Only post GitHub comments - don't submit review text as messages.
+          claude_args: >-
+            --allowedTools
+            "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"

.github/workflows/cron-weekly-rustfmt.yml

@@ -5,9 +5,7 @@ permissions:
   pull-requests: write
 
 on:
-  schedule:
-    - cron: "0 0 * * 0" # runs weekly on Sunday at 00:00
-  workflow_dispatch: # allows manual triggering
+  workflow_dispatch: # manual only — cron schedule removed to avoid automated PRs
 jobs:
   format:
     name: Nightly rustfmt