chore(claude): allow-list the two objectui landing REST calls in settings.json

The objectui spellings of the two landing-endpoint allow rules that already
exist for objectstack since #19047. Written by the director seat itself under
the maintainer's explicit per-PR authorization, verbatim: 「19362 你可以直接开发，不派dev」
— the one charter exception to 「PM 永不写代码」 (a `.claude/` internal-tooling
PR with the authorization quoted; reviewed and merged by the maintainer, never
self-merged). Every dev-seat attempt to edit this file was refused by the
session classifier (Self-Modification, 4 refusals on 2 cards); `deny` is
untouched. The card relation is declared in the PR body.

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012GcsUbuqFGBibkEDMRC1eE

Author: os-project-manager

.claude/settings.json

@@ -50,6 +50,8 @@
       "Bash(curl -sS -X PATCH https://api.github.com/repos/objectstack-ai/objectui/pulls/* *)",
       "Bash(curl -sS -X POST https://api.github.com/repos/objectstack-ai/objectstack/pulls/*/ccr/ready_for_review *)",
       "Bash(curl -sS -X PUT https://api.github.com/repos/objectstack-ai/objectstack/pulls/*/ccr/auto_merge *)",
+      "Bash(curl -sS -X POST https://api.github.com/repos/objectstack-ai/objectui/pulls/*/ccr/ready_for_review *)",
+      "Bash(curl -sS -X PUT https://api.github.com/repos/objectstack-ai/objectui/pulls/*/ccr/auto_merge *)",
       "Bash(node --use-env-proxy scripts/pm/post-stamped.mjs *)",
       "Bash(node --use-env-proxy scripts/pm/label-write.mjs *)",
       "Bash(curl -sS -X PATCH https://api.github.com/repos/objectstack-ai/objectstack/issues/* *)",