Claude Code allows putting a managed-settings.json in place that will let you do all kinds of things if you control what's installed on people's work laptops, even if you don't want to directly needle with the user config.