feat: US-001 - Clean up settings.local.json

Remove hardcoded development paths (ralph-loop, loop-test2) and
absolute-path permissions from the allow list, keeping only
project-agnostic and relative-path permissions.

.claude/settings.local.json

@@ -0,0 +1,48 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(gh api:*)",
+      "Bash(jq .[].name)",
+      "WebFetch(domain:raw.githubusercontent.com)",
+      "WebFetch(domain:github.com)",
+      "WebFetch(domain:api.github.com)",
+      "Bash(curl:*)",
+      "Bash(chmod:*)",
+      "Bash(bash -n loop.sh)",
+      "Bash(bash -n lib/state.sh)",
+      "Bash(bash -n lib/archive.sh)",
+      "Bash(bash -n lib/prompt.sh)",
+      "Bash(bash -n lib/hooks.sh)",
+      "Bash(gh repo:*)",
+      "WebFetch(domain:www.anthropic.com)",
+      "WebFetch(domain:ghuntley.com)",
+      "Bash(gh search:*)",
+      "Bash(git remote:*)",
+      "Bash(git push:*)",
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(rm -rf ~/.claude/plugins/cache/agent-loop)",
+      "Bash(cat ~/.claude/plugins/cache/agent-loop/agent-loop/*/skills/init/SKILL.md)",
+      "Bash(ls ~/.claude/plugins/cache/agent-loop/agent-loop/*/skills/)",
+      "Bash(claude --dangerously-skip-permissions --print)",
+      "WebSearch",
+      "WebFetch(domain:executeautomation.github.io)"
+    ]
+  },
+  "enabledPlugins": {
+    "agent-loop@agent-loop": true
+  },
+  "hooks": {
+    "Stop": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "kill -INT $PPID || true"
+          }
+        ]
+      }
+    ]
+  }
+}