Add Claude PR review workflow

[TheLookingGlassFactory]

Adds .github/workflows/claude-review.yml so pull requests and @claude review comments can route through the shared AI Ops Claude PR review workflow.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2c304cd7d3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[TheLookingGlassFactory]

Updated this branch to address the workflow review feedback:

• Automatic PR reviews now run only for same-repository, non-Dependabot PRs.
• Mention-triggered comment/review events now require a trusted author association: OWNER, MEMBER, or COLLABORATOR.
• The reusable AI Ops workflow is pinned to c76384eabc355c2ea81be0de520b03579a7241a2 instead of a mutable branch.
• The caller now passes only CLAUDE_CODE_OAUTH_TOKEN instead of inheriting all repository secrets.

[TheLookingGlassFactory]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b05e62a186

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[TheLookingGlassFactory]

Closing this for now rather than trying to force the private reusable workflow into a public repository.

GitHub Actions can share private reusable workflows to other private repositories, but a public caller repo cannot reliably resolve a reusable workflow from private Looking-Glass/ai-ops. The safe options are to move the reusable reviewer workflow into a public shared repo and pin it, vendor a repo-local workflow here, or leave this repo out of Claude PR review automation for now.

This PR should stay closed until we choose one of those public-repo paths.