Documented explicit prohibition of `migrate:fresh`, `migrate:reset`, `db:wipe`, and raw DROP/TRUNCATE operations in CLAUDE.md. Prose rule clarifies that user phrases like "trust me" or "do the refactor" are not authorisation for schema rebuilds — architectural decision is separate from operational step. Added matching deny patterns to `.claude/settings.json` to block direct inv