chore: pre-commit hooks + golangci tuning

- gitleaks, commitizen, golangci-lint hooks
- add gosec (medium severity) to linters
- set goimports local-prefix for syscode-labs imports

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: syscod3

.golangci.yml

@@ -22,8 +22,12 @@ linters:
     - unconvert
     - unparam
     - unused
+    - gosec
     - logcheck
   settings:
+    gosec:
+      severity: medium
+      confidence: medium
     custom:
       logcheck:
         type: "module"
@@ -53,6 +57,10 @@ formatters:
   enable:
     - gofmt
     - goimports
+  settings:
+    goimports:
+      local-prefixes:
+        - github.com/syscode-labs/oci-pivot-controller
   exclusions:
     generated: lax
     paths:

.pre-commit-config.yaml

@@ -0,0 +1,29 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.6.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-json
+      - id: mixed-line-ending
+
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.18.4
+    hooks:
+      - id: gitleaks
+
+  - repo: local
+    hooks:
+      - id: golangci-lint
+        name: golangci-lint
+        language: system
+        entry: golangci-lint run --fix
+        types: [go]
+        pass_filenames: false
+
+  - repo: https://github.com/commitizen-tools/commitizen
+    rev: v4.13.9
+    hooks:
+      - id: commitizen
+        stages: [commit-msg]