Pin repo rules before the model edits the wrong file

One refactor. It touched five files and hard-coded timeout out of the config center. The workspace went dirty at once. Cursor could still reject per file. If `.env` had also been opened, the secret may already have entered the chat. Entered the chat, and a clear rollback path is late. Late that day, the feature table cannot help.