Sync session changes: CLAUDE.md teardown step, settings allowed commands

- CLAUDE.md: add step 5 to infrastructure protocol (tear down after testing)
- .claude/settings.local.json: add git push, docker compose, docker run to
  allowed commands accumulated during this session

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.claude/settings.local.json

@@ -3,7 +3,10 @@
     "allow": [
       "Bash(git init:*)",
       "Bash(git add:*)",
-      "Bash(git commit -m ':*)"
+      "Bash(git commit -m ':*)",
+      "Bash(git push:*)",
+      "Bash(docker compose:*)",
+      "Bash(docker run:*)"
     ]
   }
 }

CLAUDE.md

@@ -106,6 +106,12 @@ After **any** change to Dockerfiles, `docker-compose*.yml`, `nginx.conf`, setup
    docker compose up --build -d
    ```
 4. Confirm each container is running as a non-root user (`docker inspect <container> --format '{{.Config.User}}'`).
+5. **Tear down after testing** — stop and remove all containers, networks, and volumes:
+   ```bash
+   docker compose down --volumes --remove-orphans
+   # or for dev stack:
+   docker compose -f docker-compose.yml -f docker-compose.dev.yml down --volumes --remove-orphans
+   ```
 
 ## Security hook