feat(rules): add 5 anti-foot-shoot block rules (Tier 1)

Adds a new rule family - Anti foot-shoot (Tier 1) - covering the high-cost
mistakes the team has already paid for. Each rule maps 1:1 to a feedback
memory whose intent is "never do this", and ships a bypass marker for
the rare cases where the action is intentional.

The 5 new rules:

| Rule | Action | Tool | Memory |
|---|---|---|---|
| block-playwright-headless | block | Bash | feedback_no_headless.md |
| block-git-force-push-no-lease | block | Bash | feedback_resolve_merge_conflicts.md |
| block-git-rebase-skip | block | Bash | feedback_resolve_merge_conflicts.md |
| block-standup-not-in-escritorio | block | Edit/Write/MultiEdit | feedback_standup_desktop.md |
| block-goodnight-not-in-escritorio | block | Edit/Write/MultiEdit | feedback_goodnight_desktop.md |

Coverage notes:

- block-playwright-headless: matches `playwright test` (npx, pnpm, yarn,
  bare) and requires --headed / --ui / --debug on the same line.
- block-git-force-push-no-lease: positive match on `-f` or `--force` plus
  defense-in-depth negative match on `--force-with-lease` for
  pathological orderings like `git push -f --force-with-lease`.
- block-git-rebase-skip: matches `git rebase --skip` exactly; --continue
  and --abort are unaffected.
- block-{standup,goodnight}-not-in-escritorio: pattern + not_pattern on
  the same file_path field. Both `~/Escritorio` (Spanish locale) and
  `~/Desktop` (English / aliasing) are accepted.

Tests: 99 -> 128 passing (+29 new). Each rule covers positive matches,
negative matches, and bypass behavior.

Version bump: 1.8.0 -> 1.9.0 in package.json, plugin.json, and
marketplace.json (top-level + nested plugin entry).

Author: lapc506

.claude-plugin/marketplace.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
   "name": "make-no-mistakes",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "The disciplined dev lifecycle — implement issues, review PRs, sync releases, test E2E, manage sessions, and stash secrets via OS-native prompts. One plugin to make no mistakes.",
   "owner": {
     "name": "Luis Andres Pena Castillo",
@@ -11,7 +11,7 @@
     {
       "name": "make-no-mistakes",
       "description": "Dev lifecycle orchestrator: disciplined Linear issue execution with worktree isolation, PR review with Greptile gating, team release sync, E2E test generation and execution, test suite previewer, security pentesting, MoSCoW + RICE prioritization, cross-platform secret stash via OS-native GUI prompts (zenity / kdialog / osascript / Get-Credential), and session management. 18 commands, 6 auto-activating skills, 2 specialized agents.",
-      "version": "1.8.0",
+      "version": "1.9.0",
       "author": {
         "name": "Luis Andres Pena Castillo",
         "email": "lapc506@users.noreply.github.com"

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "make-no-mistakes",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "The disciplined dev lifecycle — implement issues, review PRs, sync releases, test E2E, manage sessions, stash secrets, and enforce manifest-driven tool-call hooks. One plugin to make no mistakes.",
   "author": {
     "name": "Luis Andres Pena Castillo",

hooks/rules/README.md

@@ -161,6 +161,21 @@ Adding a new family is fine — just keep ids unique and follow the schema.
   migrations directory when migrations failed to auto-run after a
   teammate's PR merged.
 
+- **Anti foot-shoot (Tier 1)** (`block-playwright-headless`,
+  `block-git-force-push-no-lease`, `block-git-rebase-skip`,
+  `block-standup-not-in-escritorio`, `block-goodnight-not-in-escritorio`)
+  — hard stops on the high-cost mistakes that already burned the team:
+  headless E2E runs (a Playwright invocation without `--headed` /
+  `--ui` / `--debug` is blocked per `feedback_no_headless.md`), bare
+  `git push --force` / `-f` without `--force-with-lease` (silent
+  collaborator-push overwrites, per `feedback_resolve_merge_conflicts.md`),
+  `git rebase --skip` (silent commit drop, same memory),
+  and writes of `daily-standup*.md` / `next-day-*.md` / `goodnight-*.md`
+  outside `~/Escritorio` (per the desktop-handoff memories
+  `feedback_standup_desktop.md` and `feedback_goodnight_desktop.md`).
+  Each rule ships a kebab-case bypass marker for the rare cases where
+  the action is intentional and documented.
+
 ## Tier 2 — decomposing non-deterministic memories
 
 Many narrative-style guidelines can be converted to deterministic rules