chore: Add git workflow enforcement with pre-push hook

[pfrederiksen]

Problem

Direct pushes to main were happening repeatedly, violating the project's branch → PR → merge workflow.

Solution

Two-layer protection:

1. Git pre-push hook (.git/hooks/pre-push)

   • Blocks direct pushes to main or master
   • Shows clear error message with correct workflow
   • Installed automatically with scripts/setup-git-hooks.sh

2. CLAUDE.md update

   • Added prominent "🚫 GIT WORKFLOW - CRITICAL" section at top
   • Includes step-by-step workflow instructions
   • Shows common mistakes to avoid
   • Documents hook installation and recovery procedures

Changes

• Created .git/hooks/pre-push to block direct main pushes
• Created scripts/setup-git-hooks.sh for easy hook installation
• Updated CLAUDE.md with prominent workflow section
• Tested: Hook successfully blocks push to main ✅

Testing

# Hook blocks direct push to main:
$ git push origin main
❌ ERROR: Direct push to 'main' is not allowed!

Benefits

• Prevents accidental direct pushes to main
• Enforces PR workflow automatically
• Clear error messages guide correct behavior
• Easy to install on new clones with setup script

🤖 Generated with Claude Code

[claude]

Code review

No issues found. Checked for bugs and CLAUDE.md compliance.