chore: Grant the Claude GitHub bot write permissions

[rekmarks]

Grant the Claude GitHub bot write permissions so that it can make commits on PRs. Also disables the WebSearch tool for Claude in the spirit of making us use this tool to make simple changes.

---

Note

Scope: Update GitHub Actions workflow for Claude in .github/workflows/claude.yml.

• Grants write access via additional_permissions (contents: write) so Claude can commit to PR branches
• Switches claude_args to multiline with corrected --allowedTools flag and adds --disallowedTools WebSearch to disable web search

^{Written by Cursor Bugbot for commit d536a68. This will update automatically on new commits. Configure here.}