Add CI lint job and document local vs CI quality gates

[Copilot]

Linting was only enforced through local hooks, which left PR quality dependent on contributor setup. This updates CI to run the required lint checks on every PR and documents how local hooks complement, rather than replace, CI enforcement.

• CI quality gate

  • Adds a dedicated lint job to the existing CI workflow
  • Runs shellcheck for install.sh
  • Runs golangci-lint for the Go codebase
  • Keeps the existing cross-platform test/build matrix focused on test and build coverage

• Contributor guidance

  • Updates README.md and README.en.md with the local commands contributors should run
  • Clarifies the role split:
    • lefthook pre-commit = convenience / fast local feedback
    • CI = required enforcement for PRs
  • Adds a simple self-serve path for resolving lint failures locally

• Workflow shape

  • Separates lint from the OS matrix so PRs get an explicit lint result without duplicating shell lint setup across all runners

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
      - run: shellcheck install.sh
      - uses: golangci/golangci-lint-action@v8
        with:
          version: v2.11.4

---

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{TIP This summary will be updated as you push new changes. Give us feedback}

[harumiWeb]

@copilot codacy ciがエラーになってるから修正して

[Copilot]

@copilot codacy ciがエラーになってるから修正して

92e25e6 で lint job の GitHub Actions 参照を immutable SHA に固定しました。Codacy が workflow security 系の指摘で落ちている想定への最小修正です。再実行で反映されるはずです。

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• app.codacy.com
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)
• https://api.github.com/repos/codacy/codacy-cli-v2/releases/latest
  • Triggering command: /usr/bin/curl curl -Lq REDACTED (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 1 additional finding.