guardrails-liteedtrackai/claude-code-guardrails-litePattern-based checks that deny .env reads, git force pushes and rm -rf on / or your home folder before Claude Code runs them.