docs: add minimumReleaseAge policy to CLAUDE.md

Author: jdalton

CLAUDE.md

@@ -61,6 +61,7 @@
 - Never create files unless necessary; always prefer editing existing files
 - Forbidden to create docs unless requested
 - 🚨 **NEVER use `npx`, `pnpm dlx`, or `yarn dlx`** -- use `pnpm exec <package>` for devDep binaries, or `pnpm run <script>` for package.json scripts
+- **minimumReleaseAge**: NEVER add packages to `minimumReleaseAgeExclude` in CI. Locally, ASK before adding — the age threshold is a security control.
 
 ## EVOLUTION