Toasts

Never commits docs/superpowers, never pushes unless you said push, asks before committing on main/staging/prod

Subagents default to Sonnet; pasting a plan path adds the hybrid rule (inline small tasks, Sonnet subagents for big ones)

Rewrites rm into macOS trash so deletes are recoverable and stop hitting the rm deny rule