Give the CI review agent full tools and unscrubbed secrets

[RyanLee-Dev]

Summary

The first run after #364 (run 36817662140) finished successfully in 29 turns, but no Feishu card arrived.

Likely cause: because allowed_non_write_users is set, claude-code-action sets CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1 (action.yml:301 at the pinned commit). This scrubs GitHub Actions secrets from the environment of the commands Claude runs, so gh/node likely could not see GH_TOKEN or the webhook. The run also recorded 8 permission denials from the narrow Bash(node|gh|git *) allowlist.

Changes, trusting the model with full freedom:

• Opt out of the subprocess secret scrub with job-level CLAUDE_CODE_SUBPROCESS_ENV_SCRUB: '0'.
• Allow all tools (Bash, Read, Write, Edit, Glob, Grep, WebFetch, WebSearch) and drop the empty MCP config and setting-source restrictions.
• Shorten the prompt: the model decides how to gather information, may read CI logs, and retries until the card is delivered.
• Enable show_full_output so the run log shows what Claude did and whether delivery succeeded. Secrets stay masked by Actions.

Validation

• actionlint passes.
• Not yet exercised on a real run.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}