security: remove settings.local.json containing RTD API token

The file contained a hardcoded ReadTheDocs API token. Remove from
tracking and add to .gitignore. The token must be revoked/rotated
since it was pushed to a public repository.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2 files changed, 3 insertions, 111 deletions

diff --git a/.claude/settings.local.json b/.claude/settings.local.json
deleted file mode 100644
index 08146991..00000000
--- a/.claude/settings.local.json
+++ /dev/null
@@ -1,111 +0,0 @@
-{
-  "env": {
-    "RTD_TOKEN": "3950c3c5298ef12d7e78134a922f09811f7da37a"
-  },
-  "permissions": {
-    "allow": [
-      "Bash(find /Users/syncer/GitHub/vyos-documentation -name *.sh -type f)",
-      "WebFetch(domain:docs.readthedocs.com)",
-      "Skill(update-config)",
-      "Bash(curl -s -H \"Authorization: Token $RTD_TOKEN\" \"https://app.readthedocs.com/api/v3/projects/\")",
-      "Bash(python3 -m json.tool)",
-      "Bash(curl -s -H 'Authorization: Token $RTD_TOKEN' https://app.readthedocs.org/api/v3/projects/)",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/?limit=50\")",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/versions/?limit=100\")",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/builds/?limit=20\")",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/redirects/?limit=100\")",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/environmentvariables/\")",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/translations/\")",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/subprojects/\")",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/?expand=active_versions\")",
-      "Bash(xargs awk:*)",
-      "Bash(grep -v \": $\")",
-      "Bash(grep -v \": 0$\")",
-      "Bash(sort -t: -k2 -rn)",
-      "Bash(while read:*)",
-      "Bash(do if:*)",
-      "Bash(then echo:*)",
-      "Bash(find . -name \"*.rst\" -exec wc -l {})",
-      "Bash(find . -name *.rst)",
-      "Bash(fi)",
-      "Bash(done)",
-      "Bash(grep -rn '^TBD$\\\\|^   TBD$\\\\|^TODO\\\\|^.. TODO\\\\|FIXME\\\\|XXX' --include=\"*.rst\" .)",
-      "Bash(git add:*)",
-      "Bash(git commit:*)",
-      "Bash(grep -rP t /Users/syncer/GitHub/vyos-documentation/docs/ --include=*.rst -l)",
-      "Bash(for f:*)",
-      "Bash(do echo:*)",
-      "Read(//Users/syncer/GitHub/vyos-documentation/docs/**)",
-      "Bash(grep -rP t /Users/syncer/GitHub/vyos-documentation/docs/ --include=*.rst -c)",
-      "Bash(grep -v ':0$')",
-      "Bash(git checkout:*)",
-      "Bash(for slug:*)",
-      "Bash(python3 -m json.tool echo \"\" done)",
-      "Bash(do)",
-      "Bash(echo \"=== $slug ===\")",
-      "Bash(curl -s -o /dev/null -w \"HTTP %{http_code}\\\\n\" -X PATCH -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" -H \"Content-Type: application/json\" -d '{\"\"hidden\"\": true}' \"https://app.readthedocs.org/api/v3/projects/vyos/versions/$slug/\")",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/redirects/\")",
-      "Bash(python3 -c \":*)",
-      "Bash(python3:*)",
-      "Bash(git push:*)",
-      "Bash(gh pr:*)",
-      "Bash(gh api:*)",
-      "Bash(gh run:*)",
-      "Bash(xargs -I{} gh api repos/vyos/vyos-documentation/actions/jobs/{}/logs)",
-      "Bash(grep -v '^\\\\s*$')",
-      "Bash(find /Users/syncer/GitHub/vyos-documentation -type f -name .vale* -o -name vale.ini -o -name vale.toml -o -name .vale.ini)",
-      "Bash(cat /Users/syncer/GitHub/vyos-documentation/.github/workflows/*.yml)",
-      "Bash(grep -r \"vyoslinter\\\\|linter\" /Users/syncer/GitHub/vyos-documentation --include=*.py --include=*.md --include=*.sh)",
-      "Bash(grep -r \"RFC\\\\|non-RFC\\\\|IP address\\\\|line too long\" /Users/syncer/GitHub/vyos-documentation --include=*.py --include=*.md --include=*.toml --include=*.ini)",
-      "Bash(xargs cat:*)",
-      "Bash(find /Users/syncer/GitHub/vyos-documentation -name *linter* -o -name vale*)",
-      "Bash(find /Users/syncer/GitHub/vyos-documentation/docs/_include/vyos-1x -name *linter* -o -name *vale*)",
-      "Bash(git config:*)",
-      "Bash(git cherry-pick:*)",
-      "Bash(awk 'length > 80' docs/automation/terraform/terraformvSphere.rst)",
-      "Bash(awk 'length > 80' docs/configuration/interfaces/openvpn-examples.rst)",
-      "Bash(awk:*)",
-      "Bash(for pr:*)",
-      "Bash(/dev/null done:*)",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/versions/?slug=1803\")",
-      "Bash(curl -s -H \"Authorization: Token 3950c3c5298ef12d7e78134a922f09811f7da37a\" \"https://app.readthedocs.org/api/v3/projects/vyos/builds/?limit=5\")",
-      "WebFetch(domain:docs.vyos.io)",
-      "WebFetch(domain:sphinx-sitemap.readthedocs.io)",
-      "Bash(brew list:*)",
-      "Bash(pip3 list:*)",
-      "Bash(pip3 install:*)",
-      "Bash(brew install:*)",
-      "Bash(pandoc --version)",
-      "Bash(pandoc:*)",
-      "Bash(vale --version)",
-      "Bash(grep -rn vyoslinter /Users/syncer/GitHub/vyos-documentation/ --include=*.yml --include=*.yaml --include=*.sh --include=*.cfg --include=*.ini)",
-      "Bash(git restore:*)",
-      "Bash(echo \"=== PR #$pr ===\")",
-      "Bash(grep -v \"^vyos-1x$\")",
-      "Bash(/Users/syncer/.claude/plugins/cache/claude-plugins-official/superpowers/5.0.5/scripts/start-server.sh --project-dir /Users/syncer/GitHub/vyos-documentation)",
-      "Bash(/Users/syncer/.claude/plugins/cache/claude-plugins-official/superpowers/5.0.5/skills/brainstorming/scripts/start-server.sh --project-dir /Users/syncer/GitHub/vyos-documentation)",
-      "Bash(git -C /Users/syncer/GitHub/vyos-documentation ls-files --error-unmatch .superpowers)",
-      "Bash(git:*)",
-      "Bash(gh auth:*)",
-      "Read(//Users/syncer/GitHub/phorge-mcp/**)",
-      "Read(//Users/syncer/GitHub/release-notes/**)",
-      "Bash(find ~/GitHub/phorge-mcp -name .env* -o -name *.key -o -name *.pem -o -name secrets*)",
-      "Bash(find /Users/syncer/GitHub/vyos-documentation -name llms.txt -o -name .well-known -o -name *ai-*)",
-      "Bash(pip3 search:*)",
-      "Bash(pip3 index:*)",
-      "WebSearch",
-      "WebFetch(domain:pypi.org)",
-      "WebFetch(domain:rst-to-myst.readthedocs.io)",
-      "WebFetch(domain:myst-parser.readthedocs.io)",
-      "WebFetch(domain:github.com)",
-      "WebFetch(domain:gist.github.com)",
-      "WebFetch(domain:documenteer.lsst.io)",
-      "WebFetch(domain:projectpythia.org)",
-      "WebFetch(domain:developers.cloudflare.com)",
-      "WebFetch(domain:docs.github.com)",
-      "WebFetch(domain:about.readthedocs.com)",
-      "WebFetch(domain:www.netlify.com)",
-      "WebFetch(domain:www.readsthedocs.com)"
-    ]
-  }
-}
diff --git a/.gitignore b/.gitignore
index 59efc806..00ab2289 100644
--- a/.gitignore
+++ b/.gitignore
@@ -30,5 +30,8 @@ __pycache__
 # os specific
 .DS_Store
 
+# claude code local settings (may contain secrets)
+.claude/settings.local.json
+
 # git worktrees
 .worktrees/