Repo hygiene: fill stack-and-commands, normalize workplan statuses

- Fill .claude/rules/stack-and-commands.md (was an empty TODO template)
- Normalize workplan frontmatter statuses to canonical vocabulary
  (completed/done -> finished) per ADR-001

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

.claude/rules/stack-and-commands.md

@@ -1,19 +1,20 @@
 ## Stack
 
-<!-- TODO: Fill in language, frameworks, and key dependencies -->
-- **Language:**
-- **Key deps:**
+- **Language:** Helm values + Kubernetes manifests, Bash Make targets
+- **Key deps:** vergabe-teilnahme (Django) and inter-hub releases, shared apps-pg cnpg cluster, SOPS/age; runs against the S2 cluster on railiance01
 
 ## Dev Commands
 
 ```bash
-# TODO: Fill in the standard commands for this repo
-
-# Install dependencies
-
-# Run tests
-
-# Lint / type check
-
-# Build / package (if applicable)
+make help                        # list all targets
+make check-tools && make check-sops   # operator preflight (read-only)
+make apps-pg-status              # shared DB health (read-only)
+make vergabe-dry-run             # helm template render, no apply
+make vergabe-status              # pod / svc / ingress / cert state (read-only)
+make vergabe-deploy              # production-touching
+make vergabe-migrate | vergabe-seed   # production-touching (Django management)
+make check-inter-hub-image-tag   # gate: explicit image tag for prod deploys
 ```
+
+`*-deploy` / `*-migrate` / `*-seed` change production workloads — operator
+approval required. Dry-run/status/check targets are safe.