fix: add checkout step and tool permissions to claude-code-action workflows

This commit fixes two issues in the pr-assignment-check and pr-stale-check workflows:

1. Added actions/checkout@v4 step with fetch-depth: 0
   - Agent mode requires a git repository to configure git settings
   - Fixes "fatal: not in a git directory" error
   - Allows Claude to access repository files and use git commands

2. Added allowed_tools: "Bash,Read,Grep,Glob"
   - Enables Claude to run gh commands and examine PR/issue content
   - Previously Claude was being blocked from using Bash tool
   - Required for workflows to function correctly

Changes based on claude-code-action documentation which shows that
agent mode (triggered by providing a prompt) needs repository access.

Author: maxprilutskiy

.github/pull_request_template.md

@@ -1,22 +1,29 @@
 ## Summary
+
 [One sentence: what this PR does]
 
 ## Changes
+
 - [Key change 1]
 - [Key change 2]
 
 ## Testing
+
 **Business logic tests added:**
+
 - [ ] [Describe test 1 - what behavior it validates]
 - [ ] [Describe test 2 - what edge case it covers]
 - [ ] All tests pass locally
 
 ## Visuals
+
 **Required for UI/UX changes:**
+
 - [ ] Before/after screenshots attached
 - [ ] Video demo for interactions (< 30s)
 
 ## Checklist
+
 - [ ] Changeset added (if version bump needed)
 - [ ] Tests cover business logic (not just happy path)
 - [ ] No breaking changes (or documented below)

.github/workflows/pr-assignment-check.yml

@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
     inputs:
       pr_number:
-        description: 'PR number to check'
+        description: "PR number to check"
         required: true
         type: number
 
@@ -19,10 +19,14 @@ jobs:
       pull-requests: write
       id-token: write
     steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - uses: anthropics/claude-code-action@v1
         with:
           anthropic_api_key: ${{ secrets.CLAUDE_CODE_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
+          allowed_tools: "Bash,Read,Grep,Glob"
           prompt: |
             EXEMPT USERS: @maxprilutskiy, @vrcprl, @davidturnbull, @monicabe, @sumitsaurabh927, @AleksandrSl (skip all checks if PR author is one of these)
 

.github/workflows/pr-stale-check.yml

@@ -2,7 +2,7 @@ name: PR Stale Check
 
 on:
   schedule:
-    - cron: '0 0 * * 1' # Every Monday at midnight UTC
+    - cron: "0 0 * * 1" # Every Monday at midnight UTC
   workflow_dispatch:
 
 jobs:
@@ -14,10 +14,14 @@ jobs:
       pull-requests: write
       id-token: write
     steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - uses: anthropics/claude-code-action@v1
         with:
           anthropic_api_key: ${{ secrets.CLAUDE_CODE_API_KEY }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
+          allowed_tools: "Bash,Read,Grep,Glob"
           prompt: |
             EXEMPT USERS: @maxprilutskiy, @vrcprl, @davidturnbull, @monicabe, @sumitsaurabh927, @AleksandrSl