ci(claude-lanes): skip drafts in the standards code-review caller

[kyle-sexton]

No related issue: consistency follow-up to #651

Summary

Every synced code-review caller and this repository's own security-review caller skip draft pull requests. This repository's own code-review caller did not.

Fix

Add if: github.event.pull_request.draft == false to the review job in .github/workflows/claude-review.yml, with the same comment the components carry.

Verification

• actionlint .github/workflows/claude-review.yml passes.
• With comments stripped, the caller now differs from components/claude-lanes/claude-review.yml only in the documented runner deviation.

Related

• fix(claude-lanes): drop the repo-wide code-review queue #651

🤖 Generated with Claude Code

https://claude.ai/code/session_01LnQjBqtHLbX5UWPWggk7vg

[claude]

Claude finished @kyle-sexton's task in 14s —— View job

---

Security review

• Gather context (PR diff, changed workflow file)
• Run /review:security-review criteria against the diff

Scope: .github/workflows/claude-review.yml (+3/-0)

Findings: None. The change adds if: github.event.pull_request.draft == false to the review job — a pure narrowing condition that skips the job on draft PRs. It does not touch permissions:, triggers, secrets, or action pins, and it doesn't remove or soften any existing guardrail (if anything it reduces exposure by running the job less often). No injection surface, no trust-boundary change, nothing in scope for zizmor's Actions-hardening lane either.

No security issues found.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-29T00:33:05.627916Z	ace7d18	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.