add cline docs

docs/GUARDRAILS.md

@@ -0,0 +1,38 @@
+# GUARDRAILS
+
+These systems are currently working and must not be broken by AI refactors.
+
+## CI/CD
+
+Jenkins pipeline builds Docker image and deploys it.
+
+Deployment process:
+
+docker save → scp → docker load
+
+## Container
+
+Name:
+plesk-agency-portal
+
+Deploy path:
+/opt/plesk-agency-portal
+
+## Reverse Proxy
+
+Managed by Nginx Proxy Manager
+
+Public URL:
+
+https://portal.rdbcloud.co.uk
+
+## Auth
+
+Supabase Magic Link authentication
+
+Environment variables:
+
+NEXT_PUBLIC_SUPABASE_URL
+SUPABASE_URL
+
+AI tools must avoid large rewrites or architectural changes without explicit instruction.