docs(redact): note config-key value must be comma-separated, no spaces

gstack-config reads values whitespace-delimited, so a space after a comma
silently drops the trailing globs. Document it and steer multi-glob users to
the committed .gstack/redact-prepush-ignore file (one glob per line).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: frederik-kaster-noygear

CLAUDE.md

@@ -476,7 +476,8 @@ determined leaker (a CHANGELOG line that does would fail a hostile screenshotter
   the committed, reviewable `.gstack/redact-prepush-ignore` file at the repo root
   (one glob per line, `#` comments — the recommended mechanism, shared across
   contributors and visible in git history) and the machine-local
-  `redact_prepush_ignore_globs` config key. Globs match repo-root-relative paths
+  `redact_prepush_ignore_globs` config key (comma-separated, no spaces — for
+  several globs prefer the committed file). Globs match repo-root-relative paths
   (`**` spans directories, e.g. `prospecting/exports/**/*.csv`); matched paths are
   dropped from the scanned diff via a git `:(exclude)` pathspec. Every exemption
   prints a one-line stderr notice (how many paths / bytes were skipped) — an

bin/gstack-config

@@ -109,7 +109,12 @@ CONFIG_HEADER='# gstack configuration — edit freely, changes take effect on ne
 #                           #   An exemption is always reported on stderr at push
 #                           #   time; non-ignored files still fail closed. `**`
 #                           #   spans directories, e.g.
-#                           #   prospecting/exports/**/*.csv,data/**/*.parquet
+#                           #   prospecting/exports/**/*.parquet,data/**/*.csv
+#                           #   NOTE: comma-separated, NO spaces (config values are
+#                           #   whitespace-delimited on read — a space would drop
+#                           #   the trailing globs). For several globs, prefer the
+#                           #   committed .gstack/redact-prepush-ignore file
+#                           #   (one glob per line).
 #
 # ─── Workspace-aware ship ────────────────────────────────────────────
 # workspace_root: $HOME/conductor/workspaces  # Where /ship looks for sibling