CLAUDE.md
@@ -183,4 +183,4 @@ - Custom SQL data access layer (`DbHelperSQL`) instead of modern ORM—`SqlSugarCore` is referenced but not actively used - No automated tests (see Testing section) - CORS policy allows any origin—tighten for production - Secrets stored in appsettings.json (use `dotnet user-secrets` instead) - Secrets stored in appsettings.json (use `dotnet user-secrets` instead)