fix: remove personal emails, gitignore sensitive paths, untrack local settings

- Replace hardcoded personal email in clear-user-data.sql with placeholder
- Change SECURITY.md contact to role-based security@arcim.io
- Add supabase/.temp/ and .claude/settings.local.json to .gitignore
- Untrack .claude/settings.local.json (keeps file on disk)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.claude/settings.local.json

@@ -1,44 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "mcp__ide__getDiagnostics",
-      "Bash(grep:*)",
-      "Bash(xargs:*)",
-      "Bash(ls:*)",
-      "Bash(find:*)",
-      "WebFetch(domain:www.skatteverket.se)",
-      "WebSearch",
-      "mcp__plugin_supabase_supabase__apply_migration",
-      "Bash(cat:*)",
-      "Bash(wc:*)",
-      "Bash(git -C /Users/jakobwennberg/erp-base log --oneline)",
-      "mcp__plugin_supabase_supabase__list_projects",
-      "Bash(python3:*)",
-      "Bash(git -C /Users/jakobwennberg/erp-base status --porcelain)",
-      "Bash(__NEW_LINE_421a23f44da9923d__ echo '=== Checking which index exports are used ===' grep -r @/components/calendar /Users/jakobwennberg/erp-base/app --include=*.tsx --include=*.ts 2)",
-      "Bash(/dev/null __NEW_LINE_421a23f44da9923d__ echo -e '\\\\n=== Checking which calendar deadline components are directly imported ===' grep -rE \"DeadlineList|DeadlineCard|DeadlineForm|DeadlineFilters|PaymentSummaryCard|TaxTodoWidget|UpcomingDeadlinesWidget\" /Users/jakobwennberg/erp-base --include=*.tsx --include=*.ts)",
-      "Bash(npm run build:*)",
-      "Bash(npx supabase:*)",
-      "Bash(curl:*)",
-      "Bash(npx tsc:*)",
-      "Bash(findstr:*)",
-      "Bash(git add:*)",
-      "Bash(git commit:*)",
-      "WebFetch(domain:raw.githubusercontent.com)",
-      "WebFetch(domain:support.fortnox.se)",
-      "Bash(npx vitest run:*)",
-      "WebFetch(domain:www.bjornlunden.se)",
-      "WebFetch(domain:www.scb.se)",
-      "WebFetch(domain:stripe.com)",
-      "WebFetch(domain:tullify.se)",
-      "WebFetch(domain:www.momsens.se)",
-      "WebFetch(domain:www.bokforingstips.se)",
-      "WebFetch(domain:rattsakuten.se)",
-      "WebFetch(domain:www.faronline.se)",
-      "WebFetch(domain:www.worldstopexports.com)",
-      "WebFetch(domain:www.riksbank.se)",
-      "WebFetch(domain:www.avalara.com)",
-      "Bash(done)"
-    ]
-  }
-}

.gitignore

@@ -41,6 +41,12 @@ yarn-error.log*
 *.tsbuildinfo
 next-env.d.ts
 
+# supabase temp files
+supabase/.temp/
+
+# claude local settings
+.claude/settings.local.json
+
 # Extension registry (auto-generated but defaults are committed)
 # Run `npm run setup:extensions` to regenerate after changing extensions.config.json
 # The empty defaults in lib/extensions/_generated/ are committed so core compiles

SECURITY.md

@@ -4,7 +4,7 @@
 
 If you discover a security vulnerability in gnubok, please report it responsibly. **Do not open a public issue.**
 
-Email: **jakob.wennberg@arcim.io**
+Email: **security@arcim.io**
 
 Include:
 - Description of the vulnerability

scripts/clear-user-data.sql

@@ -15,7 +15,7 @@
 DO $$
 DECLARE
   -- >>> SET THE TARGET USER EMAIL HERE <<<
-  target_email TEXT := 'jakob.wennberg@arcim.io';
+  target_email TEXT := 'user@example.com';  -- change this to the target user's email
   target_user_id UUID;
 BEGIN
   -- Resolve email to user ID