chore: migrate IDE environment from Kiro to Claude Code

- Add CLAUDE.md (root + ETL subdirectory + db subdirectory) consolidating all Kiro steering docs
- Add .mcp.json migrated from .kiro/settings/mcp.json (test DBs enabled, prod disabled)
- Add .claude/commands/ (audit, doc-sync, db-docs) replacing Kiro skills
- Add .claude/hooks/ (session_start, post_edit_audit, stop_audit_check) replacing Kiro hooks
- Add .claude/settings.json registering all hooks
- Add scripts/audit/prescan.py merging Kiro's audit_flagger + compliance_prescan
- Remove .kiro/agents, hooks, scripts, settings, skills, state (migrated or obsolete)
- Update .gitignore for Claude Code

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.claude/hooks/post_edit_audit_reminder.py

@@ -0,0 +1,33 @@
+#!/usr/bin/env python3
+"""PostToolUse hook: 编辑高风险文件后提醒审计"""
+import json, re, sys
+
+try:
+    data = json.load(sys.stdin)
+except Exception:
+    sys.exit(0)
+
+fp = (data.get("tool_input") or {}).get("file_path", "")
+if not fp:
+    sys.exit(0)
+
+# 转相对路径
+rel = re.sub(r"^.*?NeoZQYY[/\\]", "", fp.replace("\\", "/"))
+
+HIGH_RISK = [
+    r"^apps/etl/connectors/feiqiu/(tasks|loaders|scd|orchestration|config|database|models|quality)/",
+    r"^apps/backend/app/(routers|services|auth|schemas)/",
+    r"^db/.*/migrations/.*\.sql$",
+    r"^db/.*/schemas/.*\.sql$",
+    r"^packages/shared/",
+]
+
+for p in HIGH_RISK:
+    if re.search(p, rel):
+        print(json.dumps({
+            "hookSpecificOutput": {
+                "hookEventName": "PostToolUse",
+                "additionalContext": f"[audit-reminder] 已编辑高风险文件: {rel} — 完成本轮改动后请执行 /audit"
+            }
+        }))
+        break

.claude/hooks/session_start_context.py

@@ -0,0 +1,36 @@
+#!/usr/bin/env python3
+"""SessionStart hook: 会话开始时加载项目状态上下文"""
+import json, subprocess, sys, os
+
+project_dir = os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
+script = os.path.join(project_dir, "scripts", "audit", "prescan.py")
+
+if not os.path.isfile(script):
+    sys.exit(0)
+
+try:
+    r = subprocess.run(
+        [sys.executable, script],
+        capture_output=True, text=True, timeout=10, cwd=project_dir,
+    )
+    if r.returncode != 0:
+        sys.exit(0)
+    result = json.loads(r.stdout)
+except Exception:
+    sys.exit(0)
+
+audit_required = result.get("audit_required", False)
+total = result.get("total_files", 0)
+tags = ", ".join(result.get("risk_tags", []))
+
+if audit_required:
+    ctx = f"[session-context] 当前工作区有 {total} 个未提交的变更文件，含高风险标签: {tags}。如果这些变更来自之前的会话且未审计，建议先执行 /audit。"
+else:
+    ctx = "[session-context] 当前工作区状态正常，无高风险未审计变更。"
+
+print(json.dumps({
+    "hookSpecificOutput": {
+        "hookEventName": "SessionStart",
+        "additionalContext": ctx
+    }
+}))

.claude/hooks/stop_audit_check.py

@@ -0,0 +1,29 @@
+#!/usr/bin/env python3
+"""Stop hook: Claude 结束回复时检查是否有未审计的高风险变更"""
+import json, subprocess, sys, os
+
+project_dir = os.environ.get("CLAUDE_PROJECT_DIR", os.getcwd())
+script = os.path.join(project_dir, "scripts", "audit", "prescan.py")
+
+if not os.path.isfile(script):
+    sys.exit(0)
+
+try:
+    r = subprocess.run(
+        [sys.executable, script],
+        capture_output=True, text=True, timeout=10, cwd=project_dir,
+    )
+    if r.returncode != 0:
+        sys.exit(0)
+    result = json.loads(r.stdout)
+except Exception:
+    sys.exit(0)
+
+high_risk = result.get("high_risk_files", [])
+if result.get("audit_required", False) and len(high_risk) > 0:
+    print(json.dumps({
+        "hookSpecificOutput": {
+            "hookEventName": "Stop",
+            "additionalContext": f"[audit-check] 当前有 {len(high_risk)} 个高风险文件变更未审计。建议执行 /audit。"
+        }
+    }))