chore: enable eslint/curly rule

[John-David Dalton (jdalton)]

Enforce braces on all control flow statements (if/else/for/while). Auto-fixed all existing violations.

---

Note

Low Risk
Primarily a linting policy change with mechanical brace/format updates; the only behavioral impact is slightly stricter/safer git hook execution and error handling, which could affect local commit workflows if misconfigured.

Overview
Enforces mandatory braces on all control-flow statements by turning on eslint/curly (all) in oxlint, and applies corresponding mechanical brace/format fixes across the repo (notably in checksum scripts).

Hardens commit-message hook execution by improving .git-hooks/commit-msg output/error handling (switching to printf, adding mktemp failure handling and cleanup) and making .husky/commit-msg fail fast with a clear error if the hook script is missing or not executable.

Updates security-scan docs/metadata: marks the security-scan skill as user-invocable and fixes the referenced external tools manifest filename in _shared/security-tools.md.

^{Reviewed by Cursor Bugbot for commit 9c4228b. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​typescript/​native-preview@​7.0.0-dev.20260415.1

View full report

[John-David Dalton (jdalton)]

Consolidated into #1203

[John-David Dalton (jdalton)]

Merged into #1203