fix(7ddc-1ae7): remove CLAUDE.md from bootstrap allowlist

CLAUDE.md has a hardcoded safeguard floor rule in review-complexity-classifier.sh
(_has_safeguard_file iterates SCORING_FILES only). Adding it to the allowlist
puts it in EXEMPT_FILES, silently bypassing the floor rule and landing at light
tier. Removing it from the allowlist restores the standard-tier floor for CLAUDE.md
changes. Bootstrap scenario still benefits from .gitignore, .semgrep.yml,
.pre-commit-config.yaml, .github/workflows/**, .claude/scripts/**, and
.claude/project-understanding.md being allowlisted.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Test

plugins/dso/hooks/lib/review-gate-allowlist.conf

@@ -68,11 +68,10 @@ docs/**
 
 # Bootstrap / onboarding config artifacts (written by dso-setup.sh / onboarding
 # SKILL.md Batch Groups 2+4; contain no reviewable application code).
-# NOTE: .claude/dso-config.conf and settings.json are intentionally EXCLUDED —
-# changes to these files carry semantic review value (see classifier floor rule
-# in review-complexity-classifier.sh _has_config_file).
+# NOTE: .claude/dso-config.conf, settings.json, and CLAUDE.md are intentionally
+# EXCLUDED — changes to these carry semantic review value enforced by classifier
+# floor rules in review-complexity-classifier.sh (_has_config_file, _has_safeguard_file).
 .gitignore
-CLAUDE.md
 .semgrep.yml
 .pre-commit-config.yaml
 .github/workflows/**