chore(security): remove tracked .claude/settings.local.json + ignore .claude/

Local Claude Code permission allowlist was tracked and exposed internal
paths and tooling. Remove it from the tree and gitignore .claude/ so it
is never published again.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>