chore: add CLAUDE.md, kubectl notes, and settings/gitignore tweaks

Document the repo for Claude Code, note a couple of handy kubectl
one-liners, allow a few more Bash/WebFetch/WebSearch permissions used
during this session, and ignore the relocated zot sync-credentials.json.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

.claude/settings.json

@@ -4,7 +4,11 @@
       "Bash(for f:*)",
       "Bash(do echo:*)",
       "Read(//Users/jan.novak/srv/personal/home-kubernetes/**)",
-      "Bash(done)"
+      "Bash(done)",
+      "Bash(ssh docker-30 *)",
+      "Bash(git add *)",
+      "WebSearch",
+      "WebFetch(domain:cert-manager.io)"
     ]
   }
 }