build: claude-code project settings + ignore agent runtime state

Added .claude/settings.json with git push authorization.
Updated .gitignore to exclude .claude/agent-memory/ from tracking.

.claude/settings.json

@@ -0,0 +1,7 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(git push *)"
+    ]
+  }
+}

.gitignore

@@ -30,3 +30,6 @@ go.work.sum
 # Editor/IDE
 # .idea/
 # .vscode/
+
+# Claude Code agent runtime state (settings.json IS checked in; this isn't)
+.claude/agent-memory/