ci: vendor validation scripts and remove remote action pins

[hyperpolymath]

Automated PR to fix CI after deleted actions.

---

Summary by Gitar

• CI Workflows:
  • Added vendored validation scripts validate-a2ml.sh and validate-k9.sh in .githooks/
  • Updated dogfood-gate.yml to execute local validation scripts instead of removed remote actions

_{This will update automatically on new commits.}

[gitar-bot]

CI failed: CodeQL analysis failed because the repository contains no JavaScript or TypeScript source files, but the workflow was configured to scan for them.

Overview

1 log analyzed from the CodeQL analysis job failed with a configuration error due to targeting JavaScript/TypeScript in a repository lacking those languages.

Failures

CodeQL No Source Code Found (confidence: high)

• Type: configuration
• Affected jobs: 90125802097
• Related to change: yes
• Root cause: The CodeQL analysis workflow was configured to run on javascript-typescript, but the repository contains no JavaScript or TypeScript source files (only bash/shell scripts and workflow files), causing CodeQL to exit with error code 32.
• Suggested fix: Update the CodeQL workflow matrix to target only the programming languages actually present in the repository.

Summary

• Change-related failures: 1 CodeQL configuration failure due to incorrect language matrix targeting.
• Infrastructure/flaky failures: 0
• Recommended action: Update the CI workflow file to remove the javascript-typescript language entry from the CodeQL analysis matrix since the repository does not contain JS/TS source code.

Code Review ✅ Approved

Vendors validation scripts into .githooks/ and updates dogfood-gate.yml to execute them locally instead of using removed remote actions. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[gitar-bot]

Gitar has auto-approved this PR (configure)