A least-privilege linter for Claude Code agent policies | Hacker News Reader