- The pre-push hook skipped on PIPE_SKIP_PREPUSH_CI_GATE while the gate
script it runs skipped on PIPE_SKIP_PREPUSH_GATE, so each name worked in only
one place. Both now use PIPE_SKIP_PREPUSH_GATE.
- The PR template asked for a hand-written CHANGELOG entry; release-please
generates CHANGELOG.md from commit subjects, so the item now says that. It
also asked for a "Stability note" the repo does not have; removed.
- CODEOWNERS listed /docs/**, which does not exist.
- commitlint accepted `merge` but rejected `security`, a type
release-please-config.json maps to its Security section; `security` is now
allowed.
Mirrors the conventions used in ../yams: a sectioned .gitignore, thin
.githooks dispatchers over runnable scripts/, release-please config and
manifest, conventional-commit linting, CODEOWNERS, a PR template with a
rule-precision checkbox, and tests + commitlint workflows. CI calls
scripts/lint.sh so local hooks and CI cannot drift.
