feat: enhance permissions in settings.local.json and update deploy workflow for SSH key handling

.claude/settings.local.json

@@ -23,7 +23,12 @@
       "Bash(xargs git *)",
       "Bash(awk '{print $2}')",
       "Bash(git tag *)",
-      "Bash(git push *)"
+      "Bash(git push *)",
+      "Bash(xargs grep *)",
+      "Read(//c/Users/laure/.claude/plugins/cache/claude-plugins-official/superpowers/5.0.7/skills/brainstorming/**)",
+      "Read(//c/Users/laure/.claude/plugins/cache/claude-plugins-official/superpowers/5.0.7/**)",
+      "Read(//c/Users/laure/.claude/plugins/cache/claude-plugins-official/superpowers/**)",
+      "Bash(bash \"C:/Users/laure/.claude/plugins/cache/claude-plugins-official/superpowers/5.0.7/skills/brainstorming/scripts/start-server.sh\" --project-dir \"c:/Users/laure/Documents/Gitea/brainwave\")"
     ]
   }
 }

.gitea/workflows/deploy.yml

@@ -20,7 +20,7 @@ jobs:
 
       - name: Write SSH Key
         run: |
-          printf '%s\n' "${{ secrets.ANSIBLE_SSH_KEY }}" > /tmp/ansible_key
+          echo "${{ secrets.ANSIBLE_SSH_KEY }}" | base64 -d > /tmp/ansible_key
           chmod 600 /tmp/ansible_key
 
       - name: Write Inventory

.gitignore

@@ -1,3 +1,4 @@
 backend/brainwave.db-shm
 backend/brainwave.db-wal
 .claude/settings.local.json
+.superpowers/