* ci(claude-translator): add github_token to workflow for authentication
* ci(workflows): restrict code review to main repo PRs
Fix OIDC issues by only triggering reviews for PRs from the main repository
* ci(workflows): re-enable issues trigger for claude translator
The upstream bug has been fixed, so we can now re-enable the issues trigger.
Also update the claude-code-action to use main branch instead of v1 tag.
* workflows: restrict Claude triggers to collaborators/members/owners and fix fork PR reviews
- claude.yml: gate by author_association in [COLLABORATOR, MEMBER, OWNER]
- claude-code-review.yml: use pull_request_target, add pull-requests: write and id-token: write to enable OIDC + commenting on forks
* fix(workflows): remove 'reopened' and 'assigned' types from triggers
