Add CLAUDE.md with project context and deployment references (#35)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: kltm

CLAUDE.md

@@ -0,0 +1,57 @@
+# CLAUDE.md
+
+## Project overview
+
+go-graphstore is the Gene Ontology's Blazegraph SPARQL endpoint service. It packages Blazegraph into a Docker container behind an Apache reverse proxy and deploys it to AWS EC2 instances using Terraform and Ansible.
+
+The service runs at `rdf.geneontology.org` (production) and `rdf-internal.berkeleybop.io` (internal).
+
+## Repository structure
+
+- `docker/Dockerfile` — Multi-stage build: Maven/OpenJDK 8 builder, openjdk:8-jre runtime. Exposes port 8899.
+- `conf/` — Blazegraph configuration (readonly_cors.xml for CORS and query timeouts).
+- `provision/` — All deployment infrastructure:
+  - `aws/main.tf` — Terraform config, uses module from `geneontology/devops-aws-go-instance` (ref V3.1).
+  - `build_images.yaml`, `stage.yaml`, `start_services.yaml`, `down_services.yaml` — Ansible playbooks.
+  - `vars.yaml`, `ssl-vars.yaml`, `qos-vars.yaml` — Ansible variables.
+  - `templates/` — Jinja2 templates for docker-compose, Apache vhosts, QoS, Blazegraph config.
+  - `production/` — Production config samples. See [canonical deployment docs](https://github.com/geneontology/devops-documentation/blob/main/README.graphstore.md) for production procedures; general devops setup (credentials, environment) is at [README.setup.md](https://github.com/geneontology/devops-documentation/blob/main/README.setup.md).
+- `pom.xml` — Maven project: blazegraph-jar 2.1.4, jetty-servlets 9.2.3.
+- `Makefile` — Local build and Blazegraph loading targets.
+- `.github/workflows/aws_test.yaml` — CI/CD: provisions a test instance on push to master.
+
+## Deployment
+
+Canonical deployment documentation lives at:
+https://github.com/geneontology/devops-documentation/blob/main/README.graphstore.md
+
+Key points:
+- `go-deploy` is the high-level deployment tool for day-to-day operations. Use it for provisioning, deploying stacks, inspecting state, and destroying instances.
+- Raw `terraform` commands are for lower-level debugging only.
+- Two deployment tracks: **production** (geneontology.org) and **internal** (berkeleybop.io).
+- Workspace naming convention: `production-YYYY-MM-DD` or `internal-YYYY-MM-DD`.
+- Config files use `REPLACE_ME` placeholders. Always scan for remaining placeholders before deploying: `grep -rn 'REPLACE_ME\|YYYY-MM-DD' config-stack.yaml config-instance.yaml ssl-vars.yaml vars.yaml aws/backend.tf`
+
+## Related repositories
+
+- [devops-documentation](https://github.com/geneontology/devops-documentation) — Canonical deployment docs (README.graphstore.md). Checked out at `../devops-documentation`.
+- [devops-aws-go-instance](https://github.com/geneontology/devops-aws-go-instance) — Terraform module for AWS EC2 provisioning (consumed via `main.tf`).
+- [devops-apache-proxy](https://github.com/geneontology/devops-apache-proxy) — Apache reverse proxy Docker image (consumed at deploy time).
+- [devops-deployment-scripts](https://github.com/geneontology/devops-deployment-scripts) — Builds the `geneontology/go-devops-base` Docker image used as the devops environment.
+
+## Build and test
+
+Local build (requires Maven, Java 8):
+```
+make all
+make load-blazegraph
+```
+
+CI runs on push to master via `.github/workflows/aws_test.yaml` — provisions a test instance, verifies the service responds, then destroys it.
+
+## Important conventions
+
+- The default instance user is `ubuntu`.
+- Docker container name for devops work: `go-graphstore`.
+- Credentials and SSH keys go in `/tmp/` inside the devops container (see README.setup.md).
+- Never commit credentials, SSH keys, or `backend.tf` files (covered by `.gitignore`).