chore: add CLAUDE.md, remove internal planning docs, gitignore AI config

- Add CLAUDE.md orienting contributors; flags the repo as public and sets a high
  bar for code that must pass open-source review.
- Remove docs/plans/* internal design/planning notes (not appropriate for a
  public repo) and drop their references from code comments.
- gitignore .claude/ and other local AI assistant config.

Author: NiallJoeMaher

.gitignore

@@ -76,3 +76,8 @@ ssmSetup.zsh
 # Local-only deploy notes (never commit)
 local.md
 logs/
+
+# AI assistant local config / worktrees / scratch (never commit)
+.claude/
+.cursor/
+.aider*

CLAUDE.md

@@ -0,0 +1,59 @@
+# Codú — contributor & assistant guide
+
+Codú is the community platform for AI builders and indie hackers: a curated feed
+of articles, tips, questions, and links, with profiles, discussions, moderation,
+and a build-board. This file orients anyone (human or AI assistant) working in the
+repo.
+
+## ⚠️ This is a public, open-source repository
+
+Everything committed here is public and permanent in git history. Before you write
+or commit anything:
+
+- **No private or internal content.** No secrets, API keys, access tokens,
+  customer data, internal planning docs, design docs, scratch notes, or
+  personal/operational details. Local-only notes belong in gitignored files
+  (`local.md`, `.claude/`).
+- **No assistant attribution or scratch artifacts.** Do not add AI co-author
+  trailers, "generated by" notes, planning/design markdown, or tool config to
+  commits, commit messages, or PR descriptions.
+- **Code must clear public code review.** Assume every line will be read by
+  external contributors and maintainers. Hold a high bar: clear naming, no dead
+  code, no debug logging, tests for new logic, and changes scoped to one concern.
+
+## Stack
+
+- **Next.js (App Router)** + React + TypeScript.
+- **tRPC** for the API (`server/api/router/*`), **Drizzle ORM** over **Postgres**
+  (`server/db/schema.ts`, migrations in `drizzle/`).
+- **NextAuth** for auth; **Tailwind CSS** for styling (design tokens in
+  `styles/globals.css`).
+- **AWS**: S3 (uploads), Bedrock (content moderation/analysis), CDK-managed cron
+  Lambdas + EventBridge (`cdk/`). Deployed on **Vercel** (the `develop` branch is
+  production; `db:migrate` runs on the production build).
+- **Testing**: Vitest unit tests (`*.test.ts`), Playwright e2e (`e2e/`).
+
+## Layout (route groups = layout boundaries)
+
+`app/` is split into route groups, each its own layout "world":
+
+- `(app)` — the public 3-column rail shell (`AppShell`): feed (home), profiles,
+  posts, discussions. The feed is the homepage.
+- `(admin)` — private, full-width admin cockpit (`AdminShell`); ADMIN-role gate in
+  its `layout.tsx`. Not part of the public shell.
+- `(auth)`, `(editor)`, `(marketing)` — their own chrome.
+
+A page that should not use the public rail shell does **not** live in `(app)` — it
+gets a sibling route group. Don't reach for runtime flags to opt out of a layout.
+
+## Working in this repo
+
+- **Before claiming done, run and pass locally:** `npm run lint`,
+  `npm run prettier`, `npm run test:unit`, and `npm run build`. Migrations:
+  `npm run db:generate` after schema changes (review the generated SQL).
+- **Schema changes** are additive where possible; migrations apply on the prod
+  deploy, so never write a migration that can fail destructively.
+- **Match the surrounding code**: comment density, naming, and idioms. New tRPC
+  procedures go in the relevant `server/api/router/*` file; keep DB access there.
+- **Keep PRs focused** — one concern per PR, with a clear description of what and
+  why.

app/api/cron/daily-review/route.ts

@@ -36,7 +36,7 @@ import sendEmail from "@/utils/sendEmail";
 // use admin-session auth); unset secret refuses to run (500), wrong/missing
 // token 401. Wired via AWS Lambda + EventBridge (cdk/lib/cron-stack.ts).
 //
-// Four incremental passes (see docs/plans/2026-06-14-admin-shell-and-ai-content-design.md):
+// Four incremental passes:
 //   1. topic + sentiment tagging (posts)
 //   2. quality / spam scoring (posts)        — passes 1+2 share one Bedrock call
 //   3. re-screen moderation (posts + comments) -> reports queue (source=system)

components/Admin/AdminShell.tsx

@@ -26,8 +26,7 @@ interface NavItem {
   soon?: boolean;
 }
 
-// Sidebar sections. `soon` items are Phase 2/3 surfaces (see
-// docs/plans/2026-06-14-admin-shell-and-ai-content-design.md) — shown as the
+// Sidebar sections. `soon` items are planned surfaces — shown as the
 // roadmap but not linked until their routes exist.
 const NAV: NavItem[] = [
   { name: "Overview", href: "/admin", icon: Squares2X2Icon },