A team wants every developer on a repository to share the same Claude Code permission rules and hooks, while allowing each developer to add personal overrides, such as an extra allowed command, without affecting teammates or showing up in git. Which setup meets this?