Add Claude Code deny rules for agent safety

Deny destructive and production-impacting commands:
gem publishing, tag creation (triggers CI publish),
force push, remote branch deletion, hard reset,
and the interactive release task.

Plain `git push` stays allowed for PR workflows.

---

Generated with the help of Claude Code, https://claude.ai/code

Co-Authored-By: Claude Code Opus 4.6 <noreply@anthropic.com>

Author: mokagio

.claude/settings.json

@@ -0,0 +1,23 @@
+{
+  "permissions": {
+    "deny": [
+      "Bash(gem push*)",
+      "Bash(gem signin*)",
+      "Bash(git tag*)",
+      "Bash(git push --tags*)",
+      "Bash(git push origin --tags*)",
+      "Bash(git push -f*)",
+      "Bash(git push --force*)",
+      "Bash(git push origin -f*)",
+      "Bash(git push origin --force*)",
+      "Bash(git push origin --delete*)",
+      "Bash(git push origin :*)",
+      "Bash(git reset --hard*)",
+      "Bash(git clean*)",
+      "Bash(git checkout -- .)",
+      "Bash(git restore .)",
+      "Bash(rake new_release*)",
+      "Bash(bundle exec rake new_release*)"
+    ]
+  }
+}