Centralized Claude Code configuration: Docker-first guards, permissions, MCP gateway, and workflow skills