[predge-ai]

Adds Claude Code automation as GitHub Actions. Only new workflow files; no code changes.

.github/workflows/claude.yml (anthropics/claude-code-action v1.0.241, pinned by SHA)

• @claude in issue / PR comments, review comments, reviews and new issues runs Claude (only users with write access can trigger it; enforced by the action).
• Automatic review on PR opened / synchronize / reopened / ready_for_review (non-draft, same-repo branches only).
• Auth: CLAUDE_CODE_OAUTH_TOKEN secret (Claude subscription, from claude setup-token). Requires the Claude GitHub App: https://github.com/apps/claude

.github/workflows/claude-security-review.yml (anthropics/claude-code-security-review, pinned by SHA; the repo has no release tags)

• Security review of the PR diff, posts findings as PR comments.
• Auth: ANTHROPIC_API_KEY secret. This action does not support the OAuth token.

Safety

• pull_request only, never pull_request_target; fork PRs are skipped (and get no secrets anyway).
• permissions: {} at the top, minimal per-job permissions.
• If a secret is missing, the job prints a notice and skips its steps instead of failing.