ci(changelog): add tool permissions to claude_args for docs sync workflow

[devin-ai-integration]

Summary

Adds tool permissions to claude_args in sync-changelog-to-docs.yml

Changes:

• Upgraded model from claude-opus-4-6 to claude-opus-4-7
• Added native Claude tools: Glob, TodoWrite
• Added Bash tools: rg, jq, yq, fd, date
• Expanded git log:* to git:*
• Added gh pr diff:*, gh pr view:*

Review & Testing Checklist for Human

• Verify the claude_args format is correct and tools are properly quoted
• Trigger a test run of the sync-changelog-to-docs workflow to confirm Claude can use the new tools

Notes

WebFetch, WebSearch, Agent, and Skill were intentionally excluded — the changelog agent arbitrary user-controlled input and doesn't need arbitrary web access or subagent capabilities.

Link to Devin session: https://app.devin.ai/sessions/40b33ee544544146b1938da1497c0d34
Requested by: @skylarmb

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring