docs(claude): warn that rg's -r is --replace, not a bundled short flag

[laurigates]

What

Adds a section to ~/.claude/rules/tool-use-patterns.md on a silent, confident failure mode: rg -r is --replace and takes an argument, so bundling it into a short-flag cluster makes ripgrep rewrite every match in its own output.

# Wrong — reads as "recursive + line numbers"; actually means --replace=n
rg -rn "yolo" .
./conf/cli_clients/gemini.json:    "--n"      ← the file says "--yolo"

# Right
rg -n "yolo" .
./conf/cli_clients/gemini.json:    "--yolo"

Why

No error, no warning, and the output is well-formed — it simply does not match the file on disk. That makes it worse than a crash: the fabricated lines read as ground truth.

Observed 2026-07 while auditing a clink CLI config in pal-mcp-server. The doctored output built a false picture of the file that was nearly acted on, and was caught only because the rewritten line contradicted an earlier direct Read of the same file.

The root cause is imported muscle memory from grep -r. ripgrep is recursive by default, so there is no -r to add — the habit produces a flag that means something else entirely.

The durable fix

The rule ends by pointing at the structural answer rather than just "be careful": prefer the Grep tool over rg in Bash. It has no --replace surface, so this class of error cannot occur at all.

Also adds the diagnostic heuristic: if an rg result contradicts something you read directly, suspect the flags before you suspect the file.

🤖 Generated with Claude Code

https://claude.ai/code/session_019wryFZuz4HEs1oqY9EJfGo

[github-actions]

⚠️ Broken Links Detected

Summary

Status	Count
🔍 Total	170
✅ Successful	159
⏳ Timeouts	1
🔀 Redirected	0
👻 Excluded	9
❓ Unknown	0
🚫 Errors	1

Errors per input

Errors in exact_dot_claude/docs/prds/daily-catchup.PRD.md

• [404] https://docs.anthropic.com/claude-code/commands | Failed: Network error: Not Found

Errors in docs/adrs/0013-nixos-declarative-system-configuration.md

• [TIMEOUT] https://nixos.org/manual/nixos/stable/ | Timeout
  Full Github Actions output

---

Please fix the broken links before merging.