ci(ai-validation): merge-ref checkout + retarget origin to fork + wipe CLAUDE.md/.claude (CR findings)

Two new CR findings on PR #1990 (both raised on the same review cycle):

1. (CR, line 296, Major, Heavy lift) Tree drift between Pass 1 and
   Pass 2. The prior fix in this PR used `head.sha` (origin=fork) so
   the action's `git fetch origin <head-ref>` resolves — but that
   left validate's workspace tree at PR HEAD while prepare bundled
   `diff-md.patch` + `_changed_md/` from `refs/pull/<n>/merge`. For
   PRs where base also contributes content to a touched file, Pass 2
   workspace-Read could disagree with Pass 1's view.

   Fix: switch the validate checkout back to `refs/pull/<n>/merge`
   (workspace tree now matches the prepare bundle) and address the
   action's `git fetch origin <head-ref>` requirement separately by
   `git remote set-url origin <fork-url>` after the checkout. The
   workspace tree is unchanged by the remote retarget; only the fetch
   destination is updated. For public forks (the only kind targeting
   public vyos/vyos-documentation) the unauthenticated fetch succeeds.

2. (CR, line 316, Major) `anthropics/claude-code-action@v1` invokes
   the Claude Code CLI, which auto-discovers and loads `CLAUDE.md`
   and `.claude/**` (memory, skills, hooks, MCP, plugins) from the
   workspace at session startup. A malicious fork could pre-place a
   `CLAUDE.md` with prompt-injection content, or a `.claude/skill.md`
   marked as auto-load. Documented at:
     - code.claude.com/docs/en/claude-directory.md
     - code.claude.com/docs/en/memory

   Fix: add `CLAUDE.md` and `.claude` to the wipe list so Claude's
   auto-discovery starts from a clean slate (workflow-controlled state
   only). `--bare` would also disable this but would lose the
   `mcp__github_inline_comment` MCP server the action provides, so
   wiping reserved paths is the better fit.

Mirrored across rolling (#1990), circinus (#1991), and the sagitta
follow-up (#1993). Canonical sync once these merge.

0 files changed, 0 insertions, 0 deletions