chore(agent-team): add the agent-team config with a red-team reviewer

[bmc08gt]

Adds .claude/agent-team.json so /delegate can split work across an orchestrator and four reports in this repo.

Member	Model	Isolation	Job
orchestrator	Opus 5.5, high	read-only	Splits the objective and combines results; does not implement
explorer	Sonnet, medium	read-only	Finds code, reports path:line
worker	Sonnet, medium	workspace (own branch)	Makes one scoped change and runs the narrowest check
researcher	Sonnet, medium	none	Answers from outside sources with cited URLs
reviewer	Opus 5.5, high	read-only	Runs the plugin's red-team skill against the worker's diff

Every member runs on the Claude CLI with Fable as advisor. max_depth: 1 lets only the orchestrator delegate.

The reviewer has no distinct_from: ["worker"]. That option refuses to run two members on the same agent, and both are on Claude, so it would refuse every review.

deny_paths keeps contributors.keystore, *.keystore, *.jks, *.p8, *.p12, *.pem, local.properties, google-services.json and .env* out of the clones members work in. local.properties holds the Bugsnag, Mixpanel and Coinbase keys.

.gitignore gains .claude/workspaces/. The plugin creates workspaces outside the repo, so the entry is a guard, not a fix.