refactor(template): generalize project config for lab members

- Stop tracking settings.local.json; commit base settings.json instead
- Scope file permissions to workspace/ and .claude/ as safer default
- Add .gitignore entries for .claude runtime files (scheduled_tasks, keybindings)
- Annotate _LINK_MAP in init.py as user-customizable
- Strip personal references from workspace CLAUDE.md template

.claude/settings.json

@@ -0,0 +1,48 @@
+{
+  "enabledPlugins": {
+    "superpowers@claude-plugins-official": true
+  },
+  "enableAllProjectMcpServers": true,
+  "permissions": {
+    "allow": [
+      "Bash(python *)",
+      "Bash(python3 *)",
+      "Bash(uv *)",
+      "Bash(pip *)",
+      "Bash(pytest *)",
+      "Bash(ruff *)",
+      "Bash(black *)",
+      "Bash(git status *)",
+      "Bash(git add *)",
+      "Bash(git diff *)",
+      "Bash(git log *)",
+      "Bash(git commit *)",
+      "Bash(git push:*)",
+      "Bash(git pull *)",
+      "Bash(git fetch *)",
+      "Bash(git checkout *)",
+      "Bash(git branch *)",
+      "Bash(ls *)",
+      "Bash(mkdir *)",
+      "Bash(cp *)",
+      "Bash(mv *)",
+      "Bash(rm *)",
+      "Bash(find *)",
+      "Bash(grep *)",
+      "Bash(make *)",
+      "Bash(npx *)",
+      "Bash(node *)",
+      "Bash(npm *)",
+      "Bash(echo *)",
+      "Bash(gh *)",
+      "Bash(env)",
+      "WebSearch",
+      "Read(workspace/**/*)",
+      "Write(workspace/**/*)",
+      "Edit(workspace/**/*)",
+      "Read(.claude/**/*)",
+      "Write(.claude/**/*)",
+      "Edit(.claude/**/*)"
+    ]
+  }
+}