chore(claude): add onboard config — memory, tasks, audit, gitignore

Onboard scaffolding for the dotfiles repo: 5 memory registries,
TODO backlog, onboard audit report, and .gitignore (ignores
Oldconfig, vim swap, .claude/settings.local.json).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.claude/tasks/TODO.md

@@ -0,0 +1,27 @@
+# TODO — onboard backlog (2026-05-27)
+
+<!-- Generated by /onboard (right-sized). One entry per finding. -->
+
+## Done this session
+- [x] [P0] Fix install.sh broken /tmp/config paths (server+osx silent fail)
+- [x] [P0] Fix bashism under #!/bin/sh → bash + set -euo pipefail
+- [x] [P1] Fix nerdtree copy (cp -r / direct clone into bundle)
+- [x] [P1] Guard apt-get behind command -v (osx no longer fails)
+- [x] [P2] Drop redundant molokai clone
+- [x] [P2] Create README.md, CLAUDE.md, .gitignore
+- [x] [P2] Create .claude/memory + tasks + audits
+
+## P2 — Moyenne
+- [ ] [P2] [/hotfix] — vim/vimrc GenerateClassC: bare `name` → `a:name` (fixes :ClassC E121)
+      Files: vim/vimrc (~line 75-95)
+      Source: .claude/memory/blockers.md BLK-001
+
+## P3 — Basse
+- [ ] [P3] [/code-clean] — bashrc-* legacy backticks → $(...) (SC2006), arithmetic SC2004
+      Files: bash/bashrc-linux, bash/bashrc-server, bash/bashrc-osx
+      Note: cosmetic only, no behavior change
+
+## Post-MVP (optional, backlog)
+- [ ] Runtime-test install.sh on a clean VM (all 4 targets) — not safe on dev machine
+- [ ] Consider an `uninstall.sh` (restore from ~/Oldconfig)
+- [ ] LICENSE if repo ever goes public