chore(.gitignore): ignore .claude/settings.local.json (per-machine Claude Code overrides)

[cmeans-claude-dev]

Summary

Adds .claude/settings.local.json to .gitignore — Claude Code's per-machine permission overrides file.

Why

When a Claude Code session is granted machine-specific permissions (e.g., the project-scoped allow-list for read-only ssh holodeck pct exec 112 ... commands added 2026-04-27 so future sessions can journalctl/tail/cat Caddy logs without prompts), Claude Code writes them to .claude/settings.local.json. That file is local to the maintainer's machine — other contributors will set up their own.

The maintainer's global ~/.config/git/ignore already covers **/.claude/settings.local.json, so the file has never appeared in the maintainer's git status. But anyone else cloning this repo who uses Claude Code without that global rule WOULD see it as untracked. Adding the per-repo rule covers them too — the repo is self-contained for git status cleanliness.

What's in the diff

.gitignore (3 lines added):

+
+# Per-machine Claude Code permission overrides
+.claude/settings.local.json

CHANGELOG.md (2 lines — new bullet under existing ## [Unreleased] → ### Changed).

The new rule sits in its own commented section after the .deploy/ block from PR #52, mirroring that PR's structure.

Test plan

• git check-ignore -v .claude/settings.local.json reports the per-repo rule matched (verified locally — .gitignore:23:.claude/settings.local.json).
• ## [Unreleased] has a new ### Changed entry describing this PR.
• No unrelated changes — diff is .gitignore (3 lines) + CHANGELOG.md (2 lines).

History

This change was carried as git stash@{0} from a stale feat/batched-bigquery-query branch. Stash was applied by intent, not via git stash apply (which would have conflicted with PR #52's .deploy/ block). Stash will be dropped post-merge.

🤖 Generated with Claude Code

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[cmeans]

LGTM

[cmeans]

QA round 1 — PASS (no findings)

Tiny mirror of PR #52: .gitignore (+3) + CHANGELOG.md (+2). Diff scope matches the PR body exactly — no other files touched.

Verifications

• git check-ignore -v .claude/settings.local.json → .gitignore:23:.claude/settings.local.json .claude/settings.local.json ✓
• Precision check: git check-ignore .claude/settings.json → exit 1 (no match). The rule is anchored on the literal .local.json filename so a future shared .claude/settings.json (project-scoped) would not be hidden by accident.
• Diff scope: git diff --stat origin/main..HEAD → .gitignore | 3 +++ / CHANGELOG.md | 2 ++ / 2 files changed, 5 insertions(+) — exactly matches the PR body's "no unrelated changes" claim.
• .gitignore style: rule sits in its own commented block (# Per-machine Claude Code permission overrides) below PR #52's .deploy/ block, mirroring that PR's structure cleanly.
• CHANGELOG.md: second bullet under the existing ## [Unreleased] → ### Changed block. KaC ordering preserved (single ### Changed section). Bold-filename + prose-body shape matches PR #52's bullet and the house style of recent entries. Internal-only; no user-facing behavior change. framing kept consistent.
• uv run pytest --cov --cov-report=xml → 79/79 pass at 100% coverage (Required test coverage of 100.0% reached)
• uv run ruff check src/ tests/ → All checks passed
• uv run ruff format --check src/ tests/ → 11 files already formatted
• uv run mypy src/pypi_winnow_downloads/ → Success: no issues found in 5 source files
• CI: 9 pass / 2 expected-skip (changelog, on-unlabel) / 1 pending QA Gate

Labels: Ready for QA → QA Active → Ready for QA Signoff. Awaiting maintainer QA Approved.

[cmeans]

Audit trail: applying Ready for QA Signoff — diff scope matches PR body, .gitignore + CHANGELOG only, all four verification commands clean, CI fully green, no findings. Workflow: Ready for QA → QA Active → Ready for QA Signoff.