chore: configure Claude Code Review for automatic PR reviews

- Add automatic PR review on open/synchronize
- Configure Claude to follow CLAUDE.md guidelines
- Focus on code quality, security, and TypeScript strict mode
- Limit to 5 turns for faster reviews
- Support @claude mentions in comments

Author: peppescg

.github/workflows/claude.yml

@@ -9,12 +9,9 @@ on:
     types: [opened, synchronize]
 
 jobs:
-  claude:
-    # Auto-review on PR open/sync, or respond to @claude mentions
-    if: |
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
-      (github.event_name == 'pull_request')
+  # Auto-review on PR open/sync
+  auto-review:
+    if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -23,10 +20,10 @@ jobs:
       id-token: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
-      - name: Run Claude Code Review
-        uses: anthropics/claude-code-action@v1
+      - name: Run Claude Auto Review
+        uses: anthropics/claude-code-action@ac1a3207f3f00b4a37e2f3a6f0935733c7c64651 # v1.0
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           prompt: |
@@ -40,3 +37,24 @@ jobs:
             - hey-api integration patterns
             Be concise and actionable - highlight critical issues first.
           claude_args: "--max-turns 5"
+
+  # Respond to @claude mentions
+  interactive:
+    if: |
+      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude'))
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+      id-token: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+
+      - name: Run Claude Interactive
+        uses: anthropics/claude-code-action@v1
+        with:
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          claude_args: "--max-turns 5"