Merge chore/settings-and-synced-skills into develop

.gitignore

@@ -117,6 +117,12 @@ graphify-out/
 # test-prompts.json is hand-written for darwin and stays tracked.
 skills/graphify/SKILL.md
 skills/graphify/references/
+
+# Claude Code's mirror of the claude.ai synced skills (UUID bucket dir +
+# .bucket-* marker + manifest.json, 4 MB of Anthropic stock skills). App-owned,
+# rewritten at every sync — never tracked, like the graphify/impeccable copies.
+skills/synced/
+skills/.bucket-*
 skills/graphify/.graphify_version
 
 # /client-handover test artifacts (project-local renders)

settings.json

@@ -498,5 +498,6 @@
       "**Sensitive remote targets**: any namespace, host, database or container whose name carries `prod` or `production` as a whole word or name segment.",
       "**Sensitive data locations & audiences**: per-project `.env` files (gitignored) hold database, deploy and API credentials; some web projects store customer-submitted form data under a retention policy. Both are personal or client data — never send either to an external service."
     ]
-  }
+  },
+  "feedbackDrafts": "off"
 }