[KOliver94]

Adds a CLAUDE.md so Claude Code knows how this repository works before changing it. It points to the README, the workflow convention and the security policy instead of repeating them. It also gives the test command to run before calling a change done (node --test "scripts/*.test.mjs") and states the commit convention: plain imperative sentences, with the squash-merged PR title as the commit on main.

The rules are the ones that aren't visible from the code:

• the apply scripts change live settings, so they run with --dry-run unless asked
• a repo added to settings/repos.json needs the settings App installed by a person
• the convention and its checker change together
• the shared checks reach other repos only through a release, and their job names and dependency-review input are an interface that every caller and ruleset depends on
• assets/ paths stay fixed because other repos' READMEs embed them from main