fix: move tool permissions to claude_args parameter

The allowed_tools parameter should be passed within claude_args using
the --allowedTools flag, not as a separate action parameter.

Updated both pr-assignment-check and pr-stale-check workflows to use:
  claude_args: |
    --max-turns N
    --allowedTools "Bash,Read,Grep,Glob"

This allows Claude to execute gh commands and examine PR/issue content.

Author: maxprilutskiy

.github/workflows/pr-assignment-check.yml

@@ -26,7 +26,6 @@ jobs:
         with:
           anthropic_api_key: ${{ secrets.CLAUDE_CODE_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
-          allowed_tools: "Bash,Read,Grep,Glob"
           prompt: |
             EXEMPT USERS: @maxprilutskiy, @vrcprl, @davidturnbull, @monicabe, @sumitsaurabh927, @AleksandrSl (skip all checks if PR author is one of these)
 
@@ -41,4 +40,6 @@ jobs:
                - Encourage them to find other unassigned issues
 
             If no issues referenced or PR author is properly assigned, do nothing.
-          claude_args: "--max-turns 3"
+          claude_args: |
+            --max-turns 3
+            --allowedTools "Bash,Read,Grep,Glob"

.github/workflows/pr-stale-check.yml

@@ -21,7 +21,6 @@ jobs:
         with:
           anthropic_api_key: ${{ secrets.CLAUDE_CODE_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
-          allowed_tools: "Bash,Read,Grep,Glob"
           prompt: |
             EXEMPT USERS: @maxprilutskiy, @vrcprl, @davidturnbull, @monicabe, @sumitsaurabh927, @AleksandrSl
 
@@ -46,4 +45,6 @@ jobs:
 
             4. Close message template (friendly, concise, no emojis):
                "Closing this PR as stale to keep the repo clean. Feel free to reopen or create a new PR once you're ready to continue. Thanks for your contribution!"
-          claude_args: "--max-turns 10"
+          claude_args: |
+            --max-turns 10
+            --allowedTools "Bash,Read,Grep,Glob"