Adopt Claude Project Kit

[teamkareem]

Summary

• Adds native Claude Code agents, slash commands, and deterministic hooks.
• Merges project settings around Hyperframes conventions: bun, oxlint/oxfmt, local CLI validation, and deny rules for secrets/destructive commands.
• Keeps existing concise CLAUDE.md intact.

Verification

• python3 -m json.tool .claude/settings.json
• bash -n .claude/hooks/block-dangerous.sh .claude/hooks/pre-commit-gates.sh .claude/hooks/session-summary.sh
• python3 ~/.hermes/templates/claude-project-kit/scripts/audit-claude-project-kit.py . → Score 14/14

Refs #552

[teamkareem]

Hermes Review — Pass A/B Combined

Verdict: APPROVED, but external repository review gate remains blocking

MUST FIX

• None.

SHOULD FIX

• Fixed during review: pre-commit-gates.sh now runs bun run lint in addition to build/test, preserving the repo's existing oxlint/skill lint convention rather than weakening it.

CONSIDER

• Local verification could not run bun run lint/build/test in this Hermes shell because bun is not installed on the active PATH. The PR itself keeps those commands as the enforced hook gates.

Evidence

• Claude Project Kit audit: 14/14
• JSON syntax: .claude/settings.json passes python3 -m json.tool
• Hook syntax: .claude/hooks/*.sh passes bash -n
• PR diff secret scan: no credential material found; only deny-rule/security policy text matched.
• GitHub check: WIP check passing.

Notes

• This is configuration/docs/hooks only; no runtime package code changed.
• Upstream push is not permitted for teamkareem, so this PR is correctly opened cross-repo from teamkareem:chore/claude-project-kit.
• Merge is blocked by GitHub review requirements that require a reviewer other than the PR author/account.