chore: standardize pre-commit hooks to repo-local pattern

[gamaware]

Summary

• Convert gitleaks, shellcheck, and shellharden hooks from remote repos to local system hooks for consistent behavior across environments
• Use shellharden --check mode for security hardening validation
• Fix vale hook --no-progress flag removed in newer vale versions
• Update yamllint config to canonical pattern (120 max line length, truthy check-keys false, comments min-spaces 1, consistent indent-sequences)
• Fix pre-existing shellharden violations in shell scripts (array expansion, string comparison operators)

Test plan

• pre-commit run --all-files passes all hooks (including shellharden, vale, yamllint)
• CI quality checks pass
• CodeRabbit review addressed
• Copilot review addressed

[coderabbitai]

Warning

Rate limit exceeded

@gamaware has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 23 minutes and 15 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 10e62d33-9f64-427e-ba86-54b06ac7ce92

📥 Commits

Reviewing files that changed from the base of the PR and between 92266f9 and 8c7ef1e.

📒 Files selected for processing (4)

• .pre-commit-config.yaml
• .yamllint.yml
• scripts/generate-report.sh
• scripts/sync-repo-settings.sh

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/sync-pre-commit-patterns

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Standardizes repository pre-commit tooling/config to a repo-local “system hook” pattern and aligns lint configs/hook invocations with newer tool behaviors, while also addressing shellharden-driven shell script adjustments.

Changes:

• Convert gitleaks/shellcheck/shellharden pre-commit hooks from remote repos to repo: local + language: system, and adjust vale invocation.
• Update .yamllint.yml to a stricter/canonical linting profile (notably 120 char line length).
• Apply shellharden-motivated edits to shell scripts (string emptiness checks and loop/expansion tweaks).

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
scripts/sync-repo-settings.sh	Shellharden-oriented edits; introduces a loop regression where newline-delimited strings are incorrectly treated as bash arrays.
scripts/generate-report.sh	Adjust emptiness check for GITHUB_OUTPUT in a shellharden-friendly way.
.yamllint.yml	Tightens and standardizes yamllint rules (line length, truthy handling, indentation, comments spacing).
.pre-commit-config.yaml	Moves several hooks to local/system execution; removes vale --no-progress.

[gamaware]

@coderabbitai review

[coderabbitai]

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.