diff --git a/.claude/settings.local.json b/.claude/settings.json
similarity index 50%
rename from .claude/settings.local.json
rename to .claude/settings.json
index e8dbe3474..73b5e89b5 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.json
@@ -1,153 +1,118 @@
 {
   "permissions": {
     "allow": [
-      "Bash(grep:*)",
-      "Bash(dotnet build:*)",
+      "Bash(aspire deploy:*)",
+      "Bash(aspire mcp:*)",
+      "Bash(az account:*)",
+      "Bash(az containerapp * list:*)",
+      "Bash(az containerapp * show:*)",
+      "Bash(az containerapp logs:*)",
+      "Bash(az monitor * list:*)",
+      "Bash(az monitor * show:*)",
+      "Bash(az monitor activity-log:*)",
+      "Bash(az monitor log-analytics query:*)",
+      "Bash(az monitor metrics:*)",
+      "Bash(az postgres * list:*)",
+      "Bash(az postgres * show:*)",
       "Bash(cat:*)",
-      "Bash(iconv:*)",
-      "Bash(ls:*)",
-      "Bash(rg:*)",
-      "Bash(find:*)",
-      "Bash(dotnet restore:*)",
-      "Bash(dotnet test:*)",
-      "Bash(dotnet clean:*)",
-      "Bash(dotnet nuget locals:*)",
-      "Bash(rm:*)",
-      "Bash(diff:*)",
-      "Bash(mv:*)",
-      "Bash(timeout:*)",
-      "Bash(true)",
-      "WebFetch(domain:xunit.net)",
-      "Bash(dotnet add:*)",
-      "Bash(dotnet search:*)",
-      "Bash(dotnet list package:*)",
-      "Bash(dotnet remove:*)",
-      "Bash(dotnet run:*)",
+      "Bash(claude:*)",
+      "Bash(cmp:*)",
       "Bash(cp:*)",
-      "Bash(sed:*)",
-      "WebFetch(domain:docs.anthropic.com)",
-      "Bash(dotnet tool install:*)",
+      "Bash(curl:*)",
+      "Bash(diff:*)",
+      "Bash(docker cp:*)",
+      "Bash(docker exec:*)",
+      "Bash(docker inspect:*)",
+      "Bash(docker ps:*)",
+      "Bash(docker run:*)",
+      "Bash(dotnet-dump analyze:*)",
+      "Bash(dotnet-ildasm:*)",
       "Bash(dotnet:*)",
-      "Bash(pwsh:*)",
-      "Bash(powershell.exe:*)",
-      "Bash(mkdir:*)",
-      "WebFetch(domain:github.com)",
-      "WebSearch",
+      "Bash(echo:*)",
+      "Bash(exit 0)",
+      "Bash(file:*)",
+      "Bash(find:*)",
+      "Bash(gh:*)",
+      "Bash(git add:*)",
+      "Bash(git blame:*)",
+      "Bash(git check-ignore:*)",
       "Bash(git checkout:*)",
-      "Bash(tee:*)",
-      "Bash(git restore:*)",
-      "Bash(meshweaver-thumbnails:*)",
-      "Bash(findstr:*)",
+      "Bash(git diff:*)",
+      "Bash(git fetch:*)",
+      "Bash(git grep:*)",
       "Bash(git log:*)",
-      "Bash(python:*)",
-      "Bash(python3:*)",
-      "Bash(test:*)",
-      "Bash(Select-Object -Last 20)",
+      "Bash(git ls-remote:*)",
+      "Bash(git ls-tree:*)",
       "Bash(git mv:*)",
-      "Bash(dir:*)",
-      "Bash(node --check:*)",
-      "Bash(cd:*)",
-      "Bash(git stash:*)",
-      "Bash(git grep:*)",
-      "Bash(xargs:*)",
-      "Bash(taskkill:*)",
-      "WebFetch(domain:www.nuget.org)",
-      "Bash(curl:*)",
-      "Bash(git add:*)",
-      "Bash(git commit:*)",
-      "Bash(for f in *.json)",
-      "Bash(done)",
-      "Bash(tree:*)",
-      "WebFetch(domain:raw.githubusercontent.com)",
-      "WebFetch(domain:www.fluentui-blazor.net)",
-      "Bash(do sed -i 's/CodeFile/CodeConfiguration/g' \"$f\")",
-      "Bash(/dev/null -exec cat {} ;)",
-      "WebFetch(domain:localhost)",
       "Bash(git pull:*)",
-      "Bash(git check-ignore:*)",
-      "Bash(echo:*)",
-      "Bash(source ~/.zshrc)",
-      "Bash(pkill:*)",
-      "Bash(lsof:*)",
-      "Bash(xxd:*)",
-      "Bash(brew install:*)",
-      "Bash(brew:*)",
-      "Bash(kill:*)",
-      "Bash(git fetch:*)",
+      "Bash(git restore:*)",
+      "Bash(git rev-parse:*)",
+      "Bash(git show:*)",
+      "Bash(git stash:*)",
+      "Bash(git status:*)",
+      "Bash(grep:*)",
       "Bash(head:*)",
+      "Bash(iconv:*)",
+      "Bash(ilspycmd:*)",
+      "Bash(kill:*)",
+      "Bash(ls:*)",
+      "Bash(lsof:*)",
+      "Bash(meshweaver-thumbnails:*)",
+      "Bash(mkdir:*)",
+      "Bash(mv:*)",
+      "Bash(netstat:*)",
+      "Bash(nm:*)",
+      "Bash(node --check:*)",
       "Bash(pgrep:*)",
-      "Bash(gh extension list:*)",
-      "Bash(gh:*)",
-      "Bash(claude:*)",
+      "Bash(pkill:*)",
+      "Bash(python3:*)",
+      "Bash(python:*)",
+      "Bash(rg:*)",
+      "Bash(sed:*)",
+      "Bash(sleep:*)",
       "Bash(tail:*)",
-      "Bash(git diff:*)",
-      "Bash(dotnet-ildasm:*)",
+      "Bash(tee:*)",
+      "Bash(test:*)",
+      "Bash(timeout:*)",
+      "Bash(tr:*)",
+      "Bash(tree:*)",
+      "Bash(true)",
       "Bash(unzip:*)",
-      "Bash(ilspycmd:*)",
-      "Bash(nm:*)",
-      "Bash(docker run:*)",
-      "Bash(git ls-tree:*)",
-      "Bash(git rev-parse:*)",
+      "Bash(wait:*)",
       "Bash(wc:*)",
-      "Bash(git show:*)",
+      "Bash(xargs:*)",
+
+      "WebFetch(domain:aspire.dev)",
       "WebFetch(domain:cdnjs.cloudflare.com)",
-      "Bash(tr:*)",
-      "Bash(cmp:*)",
-      "Bash(while read f)",
-      "Bash(git blame:*)",
+      "WebFetch(domain:docs.anthropic.com)",
+      "WebFetch(domain:en.wikipedia.org)",
       "WebFetch(domain:fluent2.microsoft.design)",
-      "Bash(sips:*)",
-      "Bash(bc:*)",
-      "Bash(tasklist:*)",
-      "Bash(dotnet-dump analyze:*)",
-      "Bash(aspire mcp:*)",
-      "mcp__aspire__list_resources",
+      "WebFetch(domain:gist.github.com)",
+      "WebFetch(domain:github.com)",
+      "WebFetch(domain:localhost)",
+      "WebFetch(domain:raw.githubusercontent.com)",
+      "WebFetch(domain:support.claude.com)",
+      "WebFetch(domain:www.fluentui-blazor.net)",
+      "WebFetch(domain:www.nuget.org)",
+      "WebFetch(domain:xunit.net)",
+
+      "WebSearch",
+
+      "mcp__aspire__list_apphosts",
       "mcp__aspire__list_console_logs",
+      "mcp__aspire__list_resources",
       "mcp__aspire__list_structured_logs",
       "mcp__aspire__list_traces",
-      "Bash(az postgres:*)",
-      "WebFetch(domain:aspire.dev)",
-      "mcp__aspire__list_apphosts",
-      "Bash(az account:*)",
-      "Bash(git status:*)",
-      "WebFetch(domain:en.wikipedia.org)",
-      "Bash(docker ps:*)",
-      "Bash(docker exec:*)",
-      "Bash(DOTNET_CLI_UI_LANGUAGE=en dotnet --list-runtimes 2>&1 || echo \"FAILED\")",
-      "Bash(powershell -Command \"dotnet --version\" 2>&1)",
-      "Bash(powershell -Command \"dotnet --list-runtimes\" 2>&1)",
-      "Bash(for dir in Northwind ACME Cornerstone)",
-      "Bash(do echo \"=== $dir ===\")",
-      "Bash(1 <<'EOF'\nusing HtmlAgilityPack;\n\nvar html = \"<td><a href='#'>Link</a><br/>→ <a href='#'>Link2</a></td>\";\nvar doc = new HtmlDocument\\(\\);\ndoc.LoadHtml\\(html\\);\n\nvar td = doc.DocumentNode.SelectSingleNode\\(\"//td\"\\);\nConsole.WriteLine\\(\"TD node found: \" + \\(td != null\\)\\);\nConsole.WriteLine\\(\"TD child nodes count: \" + \\(td?.ChildNodes.Count ?? 0\\)\\);\n\nforeach \\(var child in td?.ChildNodes ?? new List<HtmlNode>\\(\\)\\)\n{\n    Console.WriteLine\\($\"  Node type: {child.NodeType}, Name: '{child.Name}', HasChildNodes: {child.HasChildNodes}\"\\);\n    if \\(child.NodeType == HtmlNodeType.Text\\)\n        Console.WriteLine\\($\"    Text: '{child.InnerText}'\"\\);\n}\nEOF)",
-      "Bash(file:*)",
-      "Bash(aspire deploy:*)",
-      "Bash(az monitor:*)",
-      "mcp__aspire__select_apphost",
-      "Bash(git ls-remote:*)",
-      "Bash(git push:*)",
-      "Bash(exit 0)",
-      "WebFetch(domain:gist.github.com)",
-      "Bash(az containerapp:*)",
-      "Skill(update-config)",
-      "Bash(netstat -ano)",
-      "Bash(wait)",
-      "Bash(netstat:*)",
-      "Bash(docker inspect:*)",
-      "Bash(wait:*)",
-      "Bash(sleep:*)",
-      "Bash(*&&*)",
-      "Bash(*|*)",
-      "Bash(wmic process:*)",
-      "Bash(powershell:*)",
-      "WebFetch(domain:support.claude.com)",
-      "Bash(git:*)",
-      "Bash(docker cp:*)",
-      "Bash(pip install *)"
+      "mcp__aspire__select_apphost"
     ],
-    "deny": [],
-    "additionalDirectories": [
-      "/tmp/claude",
-      "C:\\Users\\RolandBuergi\\AppData\\Local\\Temp\\claude"
+    "deny": [
+      "Bash(az group delete:*)",
+      "Bash(git push --force:*)",
+      "Bash(git push -f:*)",
+      "Bash(git reset --hard:*)",
+      "Bash(rm -rf /:*)",
+      "Bash(rm -rf ~:*)",
+      "Bash(sudo:*)"
     ]
   },
   "enableAllProjectMcpServers": true
diff --git a/.gitignore b/.gitignore
index b3f194492..7ecae2875 100644
--- a/.gitignore
+++ b/.gitignore
@@ -367,5 +367,8 @@ samples/Graph/Data/VUser/
 # User activity data
 **/_useractivity/
 
+# Claude Code personal settings
+.claude/settings.local.json
+
 # Claude Code scheduled tasks lock file
 .claude/scheduled_tasks.lock