Add automated Claude failure analysis for Prow CI

Integrates Claude Code via Vertex AI to automatically analyze E2E test
failures in Prow CI and generate comprehensive failure reports.

Changes:
- build/ci-Dockerfile: Install Node.js 20.x and Claude CLI with multi-arch support
- tests/e2e/scripts/analyze_failures.sh: New analysis script with:
  - Vertex AI integration via Claude Code CLI headless mode (--print flag)
  - Comprehensive secret redaction (AWS keys, GCP keys, tokens, passwords)
  - Graceful degradation when credentials unavailable
  - 10-minute timeout with partial analysis on timeout
- Makefile: Set GOOGLE_APPLICATION_CREDENTIALS and ANTHROPIC_VERTEX_PROJECT_ID
  from vault files before running analysis script
- docs/design/claude-prow-failure-analysis_design.md: Complete design document
- tests/e2e/claude_test_failure_test.go: Simple failing test for verification
- tests/e2e/backup_restore_suite_test.go: Realistic failing test that triggers
  must-gather collection

The analysis runs post-suite and does not affect test execution or results.
Output is saved to ${ARTIFACT_DIR}/claude-failure-analysis.md with automatic
secret redaction to prevent credential leakage.

Requires Vertex AI credentials in vault collection files:
- /var/run/oadp-credentials/gcp-claude-code-credentials
- /var/run/oadp-credentials/gcp-claude-code-project-id

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: kaovilai

.claude/config.json

@@ -0,0 +1,44 @@
+{
+  "permissions": {
+    "allow": [
+      "Read",
+      "Glob",
+      "Grep",
+      "Read(/go/src/**)",
+      "Read(/logs/**)",
+      "Read(/tmp/**)",
+      "Bash(ls:*)",
+      "Bash(cat:*)",
+      "Bash(head:*)",
+      "Bash(tail:*)",
+      "Bash(grep:*)",
+      "Bash(sed:*)",
+      "Bash(awk:*)",
+      "Bash(find:*)",
+      "Bash(tree:*)",
+      "Bash(wc:*)",
+      "Bash(sort:*)",
+      "Bash(uniq:*)",
+      "Bash(cut:*)",
+      "Bash(tr:*)",
+      "Bash(jq:*)",
+      "Bash(less:*)",
+      "Bash(more:*)",
+      "Bash(file:*)"
+    ],
+    "deny": [
+      "Write",
+      "Edit",
+      "Bash(rm:*)",
+      "Bash(curl:*)",
+      "Bash(wget:*)",
+      "Bash(git:push*)",
+      "Bash(docker:*)",
+      "Bash(kubectl:delete*)",
+      "Bash(kubectl:apply*)",
+      "Bash(make:*)",
+      "WebFetch",
+      "WebSearch"
+    ]
+  }
+}

Makefile

@@ -865,7 +865,20 @@ test-e2e: test-e2e-setup install-ginkgo ## Run E2E tests against OADP operator i
 	-kvm_emulation=$(KVM_EMULATION) \
 	-hco_upstream=$(HCO_UPSTREAM) \
 	-skipMustGather=$(SKIP_MUST_GATHER) \
-	$(HCP_EXTERNAL_ARGS)
+	$(HCP_EXTERNAL_ARGS) \
+	|| EXIT_CODE=$$?; \
+	if [ "$(OPENSHIFT_CI)" = "true" ]; then \
+		if [ -f /var/run/oadp-credentials/gcp-claude-code-credentials ]; then \
+			export GOOGLE_APPLICATION_CREDENTIALS=/var/run/oadp-credentials/gcp-claude-code-credentials; \
+			export CLAUDE_CODE_USE_VERTEX=1; \
+			export CLOUD_ML_REGION=global; \
+			if [ -f /var/run/oadp-credentials/gcp-claude-code-project-id ]; then \
+				export ANTHROPIC_VERTEX_PROJECT_ID=$$(cat /var/run/oadp-credentials/gcp-claude-code-project-id); \
+			fi; \
+		fi; \
+		./tests/e2e/scripts/analyze_failures.sh $${EXIT_CODE:-0}; \
+	fi; \
+	exit $${EXIT_CODE:-0}
 
 .PHONY: test-e2e-cleanup
 test-e2e-cleanup: login-required

build/ci-Dockerfile

@@ -5,11 +5,22 @@ WORKDIR /go/src/github.com/openshift/oadp-operator
 
 COPY ./ .
 
-# Install kubectl
-RUN curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" && \
+# Make analysis script executable for CI execution
+RUN chmod +x tests/e2e/scripts/analyze_failures.sh
+
+# Install kubectl (multi-arch)
+ARG TARGETARCH
+RUN curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/${TARGETARCH}/kubectl" && \
     chmod +x kubectl && \
     mv kubectl /usr/local/bin/
 
+# Install Node.js and Claude CLI
+# Using NodeSource setup script for RHEL-based images
+RUN curl -fsSL https://rpm.nodesource.com/setup_20.x | bash - && \
+    dnf install -y nodejs && \
+    npm install -g @anthropic-ai/claude-code && \
+    dnf clean all
+
 RUN go mod download && \
     mkdir -p $(go env GOCACHE) && \
     chmod -R 777 ./ $(go env GOCACHE) $(go env GOPATH)