ci: ensure shellcheck finds root dotfiles

[benrozsa]

Summary

• use glob pathspecs so git ls-files returns dotfiles at repo root
• keep shellcheck running even when only dotfiles change

Testing

• relying on GitHub Actions