refactor(claude-code): remove duplicated settings table, translate hookify rules to EN, delete dead pre-bash hook

[salimomrani]

Summary

• CLAUDE.md.hbs: removed the ## Claude Settings table — it duplicated settings.json, violating Constitution Principle 3 (ProjectConfig = single source of truth). settings.json is now the only place where git.strategy + speckit.* live.
• Hookify rules: translated from French to English (block-dangerous-rm, block-force-push, block-no-verify, warn-env-edit, warn-todo-fixme, stop-verify-tests, warn-no-test-before-commit). Aligns with the "docs → always English" convention.
• Opt-in noise: warn-todo-fixme and warn-console-log now ship with enabled: false. Too noisy as defaults; opt-in via settings.local.json.
• Dead hook removed: deleted hooks/pre-bash.sh.hbs + removed PreToolUse wiring from settings.json.hbs. Its only rule was "block npm install outside frontend/", which was low-value duplication of what the hookify block-* rules already cover. With the rule gone, the hook was a no-op — deleted per Principle 6 (no speculative abstractions).
• Scope correction: initially flagged Bash(npm install) + Bash(npm run) as duplicated in permissions.allow — that was wrong. Without a wildcard, Bash(npm run) does not cover npm install. No permission changes.

Test plan

• npm test → 423/423 pass (4 preset tests refactored to assert settings.json directly; hook tests updated for session-start.sh only)
• npm run typecheck
• npm run lint