feat: add 5 more team assets (upstream sync, migration review, pre-commit hook)
Commands:
- /sync-upstream [--dry-run] — casdoor-internal upstream sync with commit classification
- /check-migrations [repo|all] — Alembic/Prisma/Drizzle consistency checker (focuses on xiaoshou pending migrations)
Specialist agents:
- migration-reviewer — Critical/High/Low severity review for DB schema changes across
all 6 repos (Alembic, Prisma, Drizzle, xorm Sync2, raw SQL)
Playbooks:
- playbooks/casdoor-upstream-rebase.md — quarterly upstream rebase flow
with commit classification, batched merging, cross-repo JWT compat check, rollback criteria
Hooks (active by default via settings.json):
- .claude/hooks/pre-commit-check.sh — PreToolUse on Bash:
* blocks inline secrets in command strings (10+ patterns: sk-ant-, ghp_, AKIA, PEM, etc.)
* on git commit, scans staged diff for same patterns
* blocks diffs > 5000 lines (override with [huge-diff-ok] in commit msg)
- settings.json: wire PreToolUse hook