chore: bump kcl-ci to v1.37.1 (Bash sub-patterns for claude.yml)

Picks up the allowed_tools fix from kcl-ci — claude.yml tag-mode
workflow now uses Bash(git:*),Bash(bun:*),Bash(curl:*) sub-patterns
instead of bare Bash, enabling auto-approval in CI.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.forgejo/workflows/claude.yml

@@ -1,4 +1,4 @@
-# Generated by KCL v1.37.0 - DO NOT EDIT
+# Generated by KCL v1.37.1 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
@@ -40,7 +40,7 @@ jobs:
         platform: forgejo
         assignee_trigger: claude
         show_full_output: 'true'
-        allowed_tools: Bash,Read,Write,Edit,MultiEdit,Glob,Grep,WebFetch,WebSearch
+        allowed_tools: Bash(git:*),Bash(bun:*),Bash(curl:*),Read,Write,Edit,MultiEdit,Glob,Grep,WebFetch,WebSearch
     - name: Debug on failure
       if: failure()
       run: |