feat(rules): add 5 anti-foot-shoot block rules (Tier 1)

.claude-plugin/marketplace.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://anthropic.com/claude-code/marketplace.schema.json",
   "name": "make-no-mistakes",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "The disciplined dev lifecycle — implement issues, review PRs, sync releases, test E2E, manage sessions, and stash secrets via OS-native prompts. One plugin to make no mistakes.",
   "owner": {
     "name": "Luis Andres Pena Castillo",
@@ -11,7 +11,7 @@
     {
       "name": "make-no-mistakes",
       "description": "Dev lifecycle orchestrator: disciplined Linear issue execution with worktree isolation, PR review with Greptile gating, team release sync, E2E test generation and execution, test suite previewer, security pentesting, MoSCoW + RICE prioritization, cross-platform secret stash via OS-native GUI prompts (zenity / kdialog / osascript / Get-Credential), and session management. 18 commands, 6 auto-activating skills, 2 specialized agents.",
-      "version": "1.8.0",
+      "version": "1.9.0",
       "author": {
         "name": "Luis Andres Pena Castillo",
         "email": "lapc506@users.noreply.github.com"

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "make-no-mistakes",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "The disciplined dev lifecycle — implement issues, review PRs, sync releases, test E2E, manage sessions, stash secrets, and enforce manifest-driven tool-call hooks. One plugin to make no mistakes.",
   "author": {
     "name": "Luis Andres Pena Castillo",

hooks/rules/README.md

@@ -161,6 +161,21 @@ Adding a new family is fine — just keep ids unique and follow the schema.
   migrations directory when migrations failed to auto-run after a
   teammate's PR merged.
 
+- **Anti foot-shoot (Tier 1)** (`block-playwright-headless`,
+  `block-git-force-push-no-lease`, `block-git-rebase-skip`,
+  `block-standup-not-in-escritorio`, `block-goodnight-not-in-escritorio`)
+  — hard stops on the high-cost mistakes that already burned the team:
+  headless E2E runs (a Playwright invocation without `--headed` /
+  `--ui` / `--debug` is blocked per `feedback_no_headless.md`), bare
+  `git push --force` / `-f` without `--force-with-lease` (silent
+  collaborator-push overwrites, per `feedback_resolve_merge_conflicts.md`),
+  `git rebase --skip` (silent commit drop, same memory),
+  and writes of `daily-standup*.md` / `next-day-*.md` / `goodnight-*.md`
+  outside `~/Escritorio` (per the desktop-handoff memories
+  `feedback_standup_desktop.md` and `feedback_goodnight_desktop.md`).
+  Each rule ships a kebab-case bypass marker for the rare cases where
+  the action is intentional and documented.
+
 ## Tier 2 — decomposing non-deterministic memories
 
 Many narrative-style guidelines can be converted to deterministic rules