ci: add Claude Code auto-review workflow

[duanyiqun]

Summary

Adds a GitHub Actions workflow (.github/workflows/claude-code-review.yml) that runs Claude Code Auto Review on every pull request (opened and synchronize). Claude reviews the diff and posts feedback as a PR comment.

What this enables

• Automatic review on new PRs and on pushes to existing PRs
• Feedback on code quality, potential bugs, performance, security, and test coverage
• Uses the repo's CLAUDE.md for style/convention guidance when present

Configuration required

The workflow authenticates with the CLAUDE_CODE_OAUTH_TOKEN secret. An admin must add it at the repository or organization level — e.g. run claude then /install-github-app, or set an org-level secret so every repo inherits it. To use an Anthropic API key instead, replace claude_code_oauth_token with anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}.

Until that secret exists, the workflow check will show as failing — this is expected and clears once the secret is configured.

Details

• Action pinned to anthropics/claude-code-action@v1
• Least-privilege permissions: contents: read, pull-requests: write, issues: read, id-token: write

---

Generated by Claude Code