Add CLAUDE.md management for published repositories

Update publish script to create .env.dist at project root

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

bin/framework-pull-upstream.sh

@@ -111,6 +111,12 @@ fi
 echo "Branch: $CURRENT_BRANCH → $UPSTREAM_BRANCH"
 echo ""
 
+# Remove read-only attribute from CLAUDE.dist.md before update
+if [ -f "docs/CLAUDE.dist.md" ]; then
+    echo "→ Removing read-only attribute from docs/CLAUDE.dist.md..."
+    chmod u+w docs/CLAUDE.dist.md 2>/dev/null || true
+fi
+
 # Fetch updates first (before verifying branch exists)
 echo "Fetching updates from rspade_upstream..."
 if ! git fetch rspade_upstream 2>&1; then
@@ -391,6 +397,14 @@ else
     echo ""
 fi
 
+# Set read-only attribute on CLAUDE.dist.md after successful update
+if [ -f "docs/CLAUDE.dist.md" ]; then
+    echo "→ Setting read-only attribute on docs/CLAUDE.dist.md..."
+    chmod u-w docs/CLAUDE.dist.md 2>/dev/null || true
+    echo "  ✓ Framework documentation marked read-only"
+    echo ""
+fi
+
 echo "✅ Framework update complete"
 echo ""