Claude reviewers still fail "Workspace not trusted" on 0.10.313 (reviewer checkout is still the launch dir)

[piekstra]

Summary

On cr 0.10.313 with Claude Code 2.1.281, claude_cli reviewers still fail with the error from #623:

llm subprocess: Claude bg launch failed: exit status 1: Workspace not trusted. Run `claude` in <data>/runs/<pr>/.../run-<id>/workbench/reviewers/<agent>/repo once and accept the trust prompt, then retry.

The launch directory is still the per-run reviewer checkout (workbench/reviewers/<agent>/repo), so trusting CR_CLAUDE_BG_WORK_DIR (~/Library/Caches/codereview-cli/claude-bg-workdir) does not help: the orchestrator steps succeed and every reviewer fails. Retrying with --fresh-session --rerun fails the same way.

Workaround

CR_CLAUDE_FOREGROUND=1 cr review <pr-url> runs the reviewers with -p and the review completes.

Environment

• cr 0.10.313 (ce9d0d1)
• Claude Code 2.1.281, macOS
• The reviewed repositories commit a .claude/ directory.

[piekstra]

Not a regression: the failing runs were from 0.10.312, before the 0.10.313 upgrade landed on this machine (the last failure predates the install by a minute). Launching a background reviewer with 0.10.313's arguments (work dir outside the checkout, checkout via --add-dir) against a checkout that commits .claude/ works. #624 fixed it.