A team wants a CI job that runs Claude Code on every pull request to summarize test failures. The pipeline script must parse the result programmatically, and nobody is present to approve tool prompts. Security requires that the job can read files and run only git diff and the test command, nothing else. Which invocation fits?