run on the native fleet

Adds .hanzo/workflows/cicd.yml calling the canonical pipeline and drops the
GitHub-hosted workflows it replaces. Lands here because this is where the repo
is written — git.hanzo.ai is upstream and github.com is its push mirror, so the
same change made on github.com never reaches the runner fleet.

.gitignore

@@ -21,7 +21,6 @@ ingress_changelog.md
 integration/tailscale.secret
 integration/gateway-api-conformance-reports/**/experimental-dev-default-report.yaml
 hanzo-ingress
-CLAUDE.md
 AGENTS.md
 GEMINI.md
 QWEN.md

CLAUDE.md

@@ -0,0 +1 @@
+LLM.md