feat(claude): add skills, permissions, and stop hook for generator workflows

[fpindej]

Summary

Comprehensive Claude Code workflow setup for the generator repo itself (not the generated projects).

6 skills for common workflows:

• /verify - run tests, build, type-check
• /deploy - build Docker image, push to Docker Hub
• /bump-version - bump both packages + update CHANGELOG
• /sync-templates - sync files from source netrock repo with @feature marker preservation
• /create-pr - create a pull request for the current branch
• /add-feature - scaffold a new generator feature (definition, manifest, templates)

Permissions moved from settings.local.json (gitignored) to settings.json (shared):

• 31 allow rules (pnpm, git, gh, deploy script, docker)
• 23 deny rules (force push, npm/yarn, destructive rm, sensitive files)
• settings.local.json now only has user-specific cp rules
• Added settings.local.json.example for reference

Stop hook warns at session end about:

• Working on main branch
• Uncommitted changes
• Version mismatch between core and web packages

Design decisions:

• No agents (project is small enough for direct handling)
• No rules files (CLAUDE.md is under 170 lines, splitting would fragment context)
• No session-start hook (node/pnpm always present)

Test plan

• 120 tests pass
• Build succeeds
• Stop hook correctly detects uncommitted changes
• Stop hook correctly detects version mismatches