CC CLI install on GitHub Actions — broken vs. fixed

Why every claude invocation in cc-triage fast-failed in run 25443026871, and what the fix changes. Toggle to see each install command's outcome.

Workflow inventory 5 files use claude-code

Workflow	--ignore-scripts	install.cjs	Before	After
claude-release-watch.yml	yes	added	parse_failed cascade	extracts features
claude-health.yml	yes	added	claude -p 1	runs assessment
orchestkit-eval.yml	yes	added	eval -p --bare 1	eval runs
plugin-validation.yml	yes	added	silently skipped	validates
ultrareview.yml	no	n/a	already correct	unchanged

+ Re-running install.cjs is the package's own postinstall script — same code, same trust boundary.
+ --ignore-scripts stays on, so transitive postinstalls from other deps remain blocked (Scorecard #130, #132).
i The error message itself instructs this exact path: node node_modules/@anthropic-ai/claude-code/install.cjs.
+ A regression test (tests/integration/test-cc-cli-install-pattern.sh) fails if a workflow drops the install.cjs line.