Clean up settings.local.json to provide canonical permission set for all skills

[sebastientaggart]

The current .claude/settings.local.json has accumulated 61 one-off permission entries over time — including path-specific entries, broken fragments, and duplicates. This makes it a poor reference for users who want to configure their own permissions.

We need a clean, minimal permission set that covers every command used by all shipped skills (start, ship, qa, status, review, release, version, setup, etc.) so that users who add these permissions get a smooth experience with no unexpected permission prompts.

This replaces the 61 messy entries with approximately 9 broad wildcard patterns grouped by tool (git, gh, make, etc.).

[sebastientaggart]

Agent Implementation Notes

File: .claude/settings.local.json

Approach: Replace all 61 accumulated permission entries with 9 clean wildcard patterns:

• Bash(cat:*) — reading VERSION file
• Bash(gh:*) — all GitHub CLI commands
• Bash(git:*) — all git operations
• Bash(make:*) — all Makefile targets
• Bash(python3:*) — sync.sh via python3
• Bash(which:*) — tool availability checks
• Bash(wc:*) — word/line counts
• Bash(./sync.sh:*) — direct sync script calls
• WebSearch — web searches

Key decisions:

• Use broad prefix wildcards (:*) instead of per-command entries
• Alphabetical ordering within the allow list
• No path-specific entries (portable across machines)
• No broken/orphaned entries