Update .cluade/settings.json

Author: mono0x

src/dot_claude/settings.json

@@ -19,6 +19,10 @@
     "allow": [
       "Bash(rg:*)"
     ],
-    "deny": []
+    "deny": [
+      "Bash(git push:*)",
+      "Bash(sudo:*)",
+      "Read(.env.*)"
+    ]
   }
 }