feat: initial infrastructure baseline

CLAUDE.md

@@ -0,0 +1,34 @@
+# CLAUDE.md - mw-pfeddersheim-workstation Infrastructure
+
+## Project Overview
+This repository manages the DevOps configuration, software stack, and maintenance scripts for the **mw-pfeddersheim-workstation**. It follows the **saTway** methodology for workstations.
+
+## Key Directories
+- `docs/`: Documentation (Product, Tech, ADR, Learnings)
+- `scripts/`: Maintenance and automation scripts
+- `config/`: System and application configurations
+- `ansible/`: Provisioning and configuration management
+- `.clinerules/`: Project-specific AI behavior rules
+
+## Essential Commands
+| Command | Purpose |
+|---------|---------|
+| `bash scripts/maintenance.sh` | Run standard system maintenance |
+| `bash scripts/backup.sh` | Trigger local backup routines |
+| `ansible-playbook ansible/workstation.yml` | Apply workstation configuration |
+
+## Standards
+- **Methodology**: Baby Steps™, TDD for scripts
+- **Security**: Zero-Trust, Gitleaks for secrets
+- **Documentation**: All changes documented in `docs/`
+- **Scripting**: Bash scripts must use `set -euo pipefail`
+
+## Guardrails
+- **NEVER** commit secrets or private keys
+- **ALWAYS** test scripts in a safe manner before full execution
+- **PREFER** Ansible for system-wide configuration changes
+
+## Rules Hierarchy
+1. `Rules/` (Global satware AG policies)
+2. `.clinerules/` (Project-specific workstation rules)
+3. `CLAUDE.md` (This file)