Restrict auto-fix to PR branches only [auto-fix]

Add explicit checks to ensure the workflow doesn't run on main/master
branches, only on PR branches from Claude.

Author: claude

.github/workflows/auto-fix-ci.yml

@@ -17,11 +17,13 @@ jobs:
   auto-fix:
     # Only run when:
     # 1. The Validate workflow failed
-    # 2. There is an associated PR
+    # 2. There is an associated PR (not main/master branch)
     # 3. The branch was created by Claude (starts with 'claude/')
     if: |
       github.event.workflow_run.conclusion == 'failure' &&
       github.event.workflow_run.pull_requests[0] &&
+      github.event.workflow_run.head_branch != 'main' &&
+      github.event.workflow_run.head_branch != 'master' &&
       startsWith(github.event.workflow_run.head_branch, 'claude/')
     runs-on: ubuntu-latest
     steps: