chore(hooks): narrow lefthook deny-list to generic patterns

[tymofiy]

Summary

The deny-list hook previously tracked two pattern categories that belong in the containing workspace rather than in public tracked content: internal codenames and local workspace paths. Enumerating those artifacts in a tracked file in a public repo inverts the hook's own goal.

This PR drops the codename and workspace-path enumerations from lefthook.yml and keeps the hook as a backstop for AI-consultation process language — meta-behavior descriptive in nature and safe to expose publicly.

Behavior after

• pre-commit still blocks commits containing process-language patterns in staged .md/.txt/.yml/.yaml/.json/.cff/.toml files
• commit-msg still blocks commit messages containing the same patterns (after stripping Co-Authored-By trailers)
• Co-Authored-By trailer handling is unchanged

Why safe

• Process-language patterns describe meta-behavior, not private assets.
• The removed checks had zero hits in the current tracked tree, so no prose has to change.
• Primary enforcement for codenames and workspace paths now lives in the containing workspace's own hooks plus authoring-time agent awareness.

Verification

• ruby -ryaml -e "YAML.load_file('lefthook.yml')" — valid
• lefthook run pre-commit — all rules pass
• lefthook run commit-msg on this PR's commit — deny-list + validate both pass
• Direct grep confirms the removed tokens are no longer present in the file

Test plan

• CI green on GitHub Actions
• Manual check that the hook still fails on a synthetic process-language string

[Copilot]

Pull request overview

This PR updates the repo’s Lefthook deny-list hooks to only enforce generic, publicly safe “AI-consultation process language” patterns, removing workspace-specific codename/path enumerations that shouldn’t be tracked in a public repository.

Changes:

• Removes workspace-path and internal-codename pattern checks from the pre-commit deny-list scanner.
• Removes those same workspace-specific checks from the commit-msg deny-list scanner.
• Updates hook comments and user-facing error messaging to reflect the narrower scope.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The deny-list regex used just above this block includes reviewer [0-9]+\b with grep -E. On BSD/POSIX grep (macOS), \b is a backspace escape (not a word-boundary), so the hook can miss matches. Prefer a POSIX-portable boundary such as ([^[:alnum:]_]|$) after the number, or refactor to avoid \b.

[Copilot]

The regex uses \b (e.g., reviewer [0-9]+\b) under grep -E. In POSIX/BSD grep, \b is a backspace escape (not a word-boundary), so this can silently fail to match on macOS and weaken the deny-list. Use a POSIX-portable boundary (e.g., ([^[:alnum:]_]|$) after the number) or restructure the pattern to avoid \b.