chore(ci): bootstrap CI + hooks

Squash-merge bootstrap-cicd into integration

.githooks/commit-msg

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+scripts/commitlint-hook "$1"
+

.githooks/pre-commit

@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+echo "> pre-commit: format + lint + commit message check"
+
+# Run format and lint inside the CI container
+scripts/ci format
+scripts/ci lint
+
+echo "pre-commit completed."
+

.githooks/pre-push

@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+echo "> pre-push: build validation + placeholders for tests/security"
+
+scripts/ci build
+scripts/ci test
+scripts/ci security
+
+echo "pre-push completed."
+