docs(hooks): point permission configuration at settings.json instead of ~/.claude.json

Fixes #3421

rules/common/hooks.md

@@ -12,7 +12,7 @@ Use with caution:
 - Enable for trusted, well-defined plans
 - Disable for exploratory work
 - Never use dangerously-skip-permissions flag
-- Configure `allowedTools` in `~/.claude.json` instead
+- Configure `permissions.allow` rules in `~/.claude/settings.json` (or a project's `.claude/settings.json`) instead
 
 ## TodoWrite Best Practices