chore: expand and clean up .claude/settings.json

- broaden the permission allowlist (git porcelain, file utils, curl)
- "preferences" key (tmux split panes, markdown responses)
- tighten the deny list (force-push, git clean, destructive rm)
- keep only permissions relevant to this repo (generic `bash scripts/*`
  covers its own scripts; no jetson/agent-swarm template entries)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.claude/settings.json

@@ -6,7 +6,12 @@
   },
   "outputStyle": "Explanatory",
   "teammateMode": "tmux",
+  "preferences": {
+    "tmuxSplitPanes": "true",
+    "responseFormat": "markdown"
+  },
   "permissions": {
+    "defaultMode": "acceptEdits",
     "allow": [
       "Bash(cmake:*)",
       "Bash(ctest:*)",
@@ -25,18 +30,56 @@
       "Bash(git branch:*)",
       "Bash(git ls-remote:*)",
       "Bash(git ls-files:*)",
+      "Bash(git remote:*)",
+      "Bash(git rev-parse:*)",
+      "Bash(git rev-list:*)",
+      "Bash(git merge-base:*)",
+      "Bash(git diff-tree:*)",
+      "Bash(git describe:*)",
+      "Bash(git tag:*)",
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(git switch:*)",
+      "Bash(git checkout:*)",
+      "Bash(git restore:*)",
+      "Bash(git stash:*)",
+      "Bash(git fetch:*)",
+      "Bash(git pull:*)",
+      "Bash(git push:*)",
+      "Bash(git merge:*)",
+      "Bash(git rebase:*)",
+      "Bash(git worktree:*)",
+      "Bash(git init:*)",
+      "Bash(git mv:*)",
       "Bash(ls:*)",
       "Bash(find:*)",
       "Bash(grep:*)",
       "Bash(rg:*)",
       "Bash(wc:*)",
-      "Bash(curl -s*)"
+      "Bash(curl -s*)",
+      "Bash(curl:*)",
+      "Bash(bash -n:*)",
+      "Bash(cat:*)",
+      "Bash(head:*)",
+      "Bash(tail:*)",
+      "Bash(awk:*)",
+      "Bash(jq:*)",
+      "Bash(mkdir:*)",
+      "Bash(cp:*)",
+      "Bash(test:*)",
+      "Bash(echo:*)",
+      "Bash(true)"
     ],
     "deny": [
-      "Bash(git push --force* origin main*)",
-      "Bash(git push -f* origin main*)",
-      "Bash(git reset --hard*)",
-      "Bash(rm -rf /*)"
+      "Bash(git push --force:*)",
+      "Bash(git push -f:*)",
+      "Bash(git clean -fdx:*)",
+      "Bash(git clean -fd:*)",
+      "Bash(rm -rf /)",
+      "Bash(rm -rf /*)",
+      "Bash(rm -rf ~)",
+      "Bash(rm -rf ~/*)",
+      "Bash(sudo rm:*)"
     ]
   }
 }