chore(hooks): add tracked pre-commit hook via githooks/

Portable setup: pre-commit lives in githooks/ (tracked), activated
by `make install-hooks` which sets core.hooksPath. Survives fresh
clones.

The hook does two things on staged changes:
- Scans added lines for common credential patterns (AWS keys, sk-*
  tokens, BEGIN PRIVATE KEY blocks, api_key/password literals)
- Runs check-parens on staged .el files

Bypass with `git commit --no-verify` for confirmed false positives.

0 files changed, 0 insertions, 0 deletions