fix(ci): correct code-review prompt and elevate permissions

Codex review found two real issues in the generated workflow:

- The PR selector `${{ github.repository }}/pull/${{ ... }}` expands to
  `owner/repo/pull/N`, which `gh pr view` rejects as a branch lookup. Pass
  the number directly so the plugin can resolve the PR.
- The code-review plugin only prints findings to the Actions log unless
  `--comment` is supplied; without it the review never reaches the PR.
- Posting PR comments requires `pull-requests: write` on the job token.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: chapati23

.github/workflows/claude-code-review.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      pull-requests: read
+      pull-requests: write
       issues: read
       id-token: write
 
@@ -41,6 +41,6 @@ jobs:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           plugin_marketplaces: "https://github.com/anthropics/claude-code.git"
           plugins: "code-review@claude-code-plugins"
-          prompt: "/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}"
+          prompt: "/code-review:code-review ${{ github.event.pull_request.number }} --comment"
           # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
           # or https://code.claude.com/docs/en/cli-reference for available options