fix(github): add gh api to claude-review allowed-tools (#4573)

The code-review plugin needs `gh api` access to fetch file contents
and post PR reviews. Without it, these calls were silently denied,
preventing the review from being posted.

Author: pomfrida

.github/workflows/claude-code-review.yml

@@ -68,4 +68,4 @@ jobs:
             test coverage with jest-axe, and conventional commits.
             Refer to CLAUDE.md and .github/copilot-instructions.md for detailed conventions."
             --allowed-tools
-            "Bash(git:*),Bash(gh pr:*),Bash(gh issue:*),Bash(ls:*),Bash(cat:*),Bash(grep:*),Bash(head:*),Bash(tail:*)"
+            "Bash(git:*),Bash(gh pr:*),Bash(gh issue:*),Bash(gh api:*),Bash(ls:*),Bash(cat:*),Bash(grep:*),Bash(head:*),Bash(tail:*)"