add a project pre-commit hook that runs make lint
`make hooks-install` points `core.hooksPath` at `.githooks/` so commits
run lint locally. The hook chains to `$PM_PRE_COMMIT_CHAIN/pre-commit`
when set so a global Databricks pre-commit still gets to run its
secret-scan / commit-msg checks.
The lint target now exits with an explicit "don't use noqa / type:
ignore to silence" hint so contributors fix the underlying issue
instead of suppressing the warning.