fix: move package management rule to AI_RULES.md (Single Source of Truth)

AI_RULES.md

@@ -20,6 +20,7 @@ For technical architecture, data models, and stack details, refer to [PROJECT_AR
   - Always update `VERSION.json` on every commit.
   - Do NOT add AI co-author signatures (e.g., `Co-Authored-By: AI...`) to commit messages.
   - Branching: `master` (stable), `dev` (active development), `vX` (archival releases).
+- **PACKAGE MANAGEMENT**: Any new package installed via `pip install` MUST be added to `backend/requirements.txt` with version constraints (e.g., `slowapi>=0.1.9`). Keep requirements.txt synchronized with installed packages.
 - **MANDATORY LOGGING**: Document coding/architecture changes in `dev_docs/ARCHIVE_LOGS.md` at the end of the task.
 - **TRIPLE CONFIRMATION (Safe Forget)**: You cannot delete a physical location, item, or critical entity without explicit user permission three times.
 

CLAUDE.md

@@ -9,14 +9,3 @@ Before taking any action or writing code, you MUST read the following Single Sou
 3. `dev_docs/SESSION_STATE.md` (Contains the current handover status from the previous AI).
 
 Do not proceed with any task until you have analyzed these three files.
-
-## Mandatory Rules
-
-1. **Package Management** — MANDATORY
-   - Any new package installed via `pip install` MUST be added to `backend/requirements.txt`
-   - Keep requirements.txt synchronized with actual installed packages
-   - Document version constraints (e.g., `slowapi>=0.1.9`)
-
-2. **English Only** — MANDATORY
-   - All code, comments, docstrings, and commit messages must be in English
-   - Production files (code, docs) are English-only; only user-AI discussion may use Romanian