ci: pass base-action tool restrictions through claude_args

[fallintoplace]

Summary

Three repository integration steps still pass allowed_tools: "LS,Read" to ./base-action, even though that input was removed during the v1 simplification. The current metadata only forwards claude_args through INPUT_CLAUDE_ARGS.

GitHub Actions can warn about the unexpected input and continue, so these workflows may stay green while running without the tool restriction they claim to test.

Change

Replace the unsupported input with the equivalent current configuration:

claude_args: '--allowedTools "LS,Read"'

This updates:

• the inline prompt integration test
• the prompt file integration test
• the custom executable integration test

The patch is limited to those three input lines.

Verification

• Confirmed base-action/action.yml forwards claude_args to INPUT_CLAUDE_ARGS.
• bun test base-action/test/parse-shell-args.test.ts test/modes/parse-tools.test.ts: 26 pass, 0 fail
• bunx prettier --check .github/workflows/test-base-action.yml .github/workflows/test-custom-executables.yml: clean
• git diff --check: clean