docs: add minimumReleaseAge policy to CLAUDE.md

Author: jdalton

CLAUDE.md

@@ -90,6 +90,7 @@ The file system is working memory. Use it actively:
 - Forbidden to create docs unless requested
 - Required to do exactly what was asked
 - NEVER use `npx`, `pnpm dlx`, or `yarn dlx` — use `pnpm exec <package>` for devDep binaries, or `pnpm run <script>` for package.json scripts
+- **minimumReleaseAge**: NEVER add packages to `minimumReleaseAgeExclude` in CI. Locally, ASK before adding — the age threshold is a security control.
 
 ## DOCUMENTATION POLICY