docs: add minimumReleaseAge policy to CLAUDE.md

Author: jdalton

CLAUDE.md

@@ -70,6 +70,7 @@
 - Forbidden to create docs unless requested
 - Required to do exactly what was asked
 - 🚨 **NEVER use `npx`, `pnpm dlx`, or `yarn dlx`** — use `pnpm exec <package>` for devDep binaries, or `pnpm run <script>` for package.json scripts. If a tool is needed, add it as a pinned devDependency first.
+- **minimumReleaseAge**: NEVER add packages to `minimumReleaseAgeExclude` in CI. Locally, ASK before adding — the age threshold is a security control.
 
 ## ROLE