A platform team wants every engineer on a monorepo to get the same Claude Code behavior: the same build and test commands, the same coding conventions, and a restriction that Claude must never run destructive shell commands without approval. Individual engineers should still be able to add personal preferences that are not committed to the repo. Which configuration approach best satisfies these requirements?