chore(perms): allow ssh/scp/sftp/rsync for agent deployment tasks

Adds to permissions.allow:
- ssh, scp, sftp (remote exec + file transfer)
- ssh-add, ssh-keygen, ssh-copy-id (key management)
- rsync (fast file sync)

No Dockerfile change -> no rebuild needed; settings.json is bind-mounted
into the container. After git pull, /exit + restart claude to reload.

.claude/settings.json

@@ -2,6 +2,13 @@
   "$schema": "https://json.schemastore.org/claude-code-settings.json",
   "permissions": {
     "allow": [
+      "Bash(ssh:*)",
+      "Bash(scp:*)",
+      "Bash(sftp:*)",
+      "Bash(ssh-add:*)",
+      "Bash(ssh-keygen:*)",
+      "Bash(ssh-copy-id:*)",
+      "Bash(rsync:*)",
       "Bash(git status*)",
       "Bash(git diff*)",
       "Bash(git log*)",