fix: add GH_PAT token to all claude workflows to fix OIDC authentication errors

.github/workflows/claude-ci-autofix.yml

@@ -84,6 +84,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
 
           prompt: |
             You are a CI failure auto-fixer for the repository ${{ github.repository }}.

.github/workflows/claude-dependency-review.yml

@@ -36,6 +36,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
           # Allow external contributors (fork PRs) to trigger this workflow
           allowed_non_write_users: "*"
 

.github/workflows/claude-docs-review.yml

@@ -36,6 +36,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
           allowed_non_write_users: "*"
 
           prompt: |

.github/workflows/claude-issue-auto-response.yml

@@ -24,6 +24,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
 
           prompt: |
             You are a helpful assistant for the repository ${{ github.repository }}.

.github/workflows/claude-issue-duplicate-check.yml

@@ -24,6 +24,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
 
           prompt: |
             You are a duplicate issue detector for the repository ${{ github.repository }}.

.github/workflows/claude-issue-oncall-triage.yml

@@ -24,6 +24,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
 
           prompt: |
             You are an oncall triage assistant for the repository ${{ github.repository }}.

.github/workflows/claude-issue-stale-cleanup.yml

@@ -24,6 +24,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
 
           prompt: |
             You are a stale issue cleanup assistant for the repository ${{ github.repository }}.

.github/workflows/claude-issue-triage.yml

@@ -24,6 +24,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
 
           prompt: |
             You are an issue triage assistant for the repository ${{ github.repository }}.

.github/workflows/claude-mention-responder.yml

@@ -32,6 +32,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
           trigger_phrase: "@claude"
 
           prompt: |

.github/workflows/claude-pr-changelog.yml

@@ -28,6 +28,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
 
           prompt: |
             You are a changelog generator for the repository ${{ github.repository }}.

.github/workflows/claude-pr-description.yml

@@ -30,6 +30,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
           # Allow external contributors (fork PRs) to trigger this workflow
           allowed_non_write_users: "*"
 

.github/workflows/claude-pr-label.yml

@@ -30,6 +30,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
           # Allow external contributors (fork PRs) to trigger this workflow
           allowed_non_write_users: "*"
 

.github/workflows/claude-pr-review.yml

@@ -32,6 +32,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
           allowed_non_write_users: "*"
 
           prompt: |

.github/workflows/claude-pr-size-check.yml

@@ -30,6 +30,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
           # Allow external contributors (fork PRs) to trigger this workflow
           allowed_non_write_users: "*"
 

.github/workflows/claude-release-notes.yml

@@ -23,6 +23,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
 
           prompt: |
             You are a release notes generator for the repository ${{ github.repository }}.

.github/workflows/claude-review-responder.yml

@@ -35,6 +35,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
 
           prompt: |
             You are a PR author assistant for the repository ${{ github.repository }}.

.github/workflows/claude-security-scan.yml

@@ -41,6 +41,7 @@ jobs:
           ANTHROPIC_BASE_URL: ${{ secrets.ANTHROPIC_BASE_URL }}
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GH_PAT }}
           allowed_non_write_users: "*"
 
           prompt: |