docs: add critical security and dependency resolution guidelines to CLAUDE.md

[kdaviduik]

WHY are these changes introduced?

Adds more safeguards + helpful information to CLAUDE.md to help it help us

HOW to test your changes?

Post-merge steps

Checklist

• [ ] I've read the Contributing Guidelines
• [ ] I've considered possible cross-platform impacts (Mac, Linux, Windows)
• [ ] I've added a changeset if this PR contains user-facing or noteworthy changes
• [ ] I've added tests to cover my changes
• [x] I've added or updated the documentation