fix(build): merge-time fixes for #500

- pre-push hook: skip with a notice when npm is not on PATH (GUI git
  clients and IDEs often run hooks with a minimal PATH), instead of
  blocking every push on "npm: not found"; real-push test with a
  stripped PATH
- test/git-hooks.test.ts: pin GIT_CONFIG_NOSYSTEM=1 and
  GIT_CONFIG_GLOBAL=/dev/null around the resolveGitHooksDir tests, so
  an exported global or a system core.hooksPath no longer fails them
- watch tsconfig.json, .prettierignore and .editorconfig too:
  typecheck and format:check read them
- check:browser-excludes: fail loudly when the vitest list output and
  the walked test/**/*.test.ts tree share no path (format drift would
  otherwise pass vacuously)
- Reword the PRE_PUSH_MARKER comment: bumping its version would make every
  installed v1 hook read as foreign and never refresh again.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

scripts/git-hooks.mjs

@@ -28,7 +28,11 @@ import { execFileSync } from 'node:child_process';
 import { chmodSync, existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from 'node:fs';
 import { basename, dirname, join, resolve } from 'node:path';
 
-/** Ownership marker. Bump the version suffix when the body changes meaningfully. */
+/**
+ * Ownership marker. ⚠️ Never bump the version suffix: ownership is matched on this exact
+ * string, so a `v2` would read every installed `v1` hook as foreign and never refresh it.
+ * A changed body still reaches installed hooks, because the refresh compares the whole file.
+ */
 export const PRE_PUSH_MARKER = '# codeman-managed-hook: pre-push v1';
 
 /**
@@ -52,8 +56,10 @@ export const PRE_PUSH_CHECKS = [
  * check:frontend-syntax), config/ (eslint + vitest configs, test-suites.ts, the CLI
  * catalogue), scripts/ (every check is a script there, and typecheck's second pass compiles
  * one), test/ (check:browser-excludes scans it and runs `vitest list` over it),
- * package.json + package-lock.json (check:lockfile) and install.sh (generate:cli-catalog
- * --check diffs its generated block).
+ * package.json + package-lock.json (check:lockfile), install.sh (generate:cli-catalog
+ * --check diffs its generated block), tsconfig.json (typecheck, and
+ * config/tsconfig.scripts.json extends it) and .prettierignore + .editorconfig
+ * (format:check; the Prettier CLI honours .editorconfig by default).
  */
 export const PRE_PUSH_WATCHED_PATHS = [
   'src',
@@ -63,6 +69,9 @@ export const PRE_PUSH_WATCHED_PATHS = [
   'package.json',
   'package-lock.json',
   'install.sh',
+  'tsconfig.json',
+  '.prettierignore',
+  '.editorconfig',
 ];
 
 /**
@@ -95,6 +104,10 @@ if [ ! -d node_modules ]; then
   exit 0
 fi
 
+# GUI git clients and IDEs often run hooks with a minimal PATH that lacks an nvm or
+# Homebrew Node. Every check would then fail with "npm: not found", so skip instead.
+command -v npm >/dev/null 2>&1 || { echo "pre-push: npm not on PATH, skipping checks."; exit 0; }
+
 # git feeds us "<localref> <localsha> <remoteref> <remotesha>" per ref. A deletion has an
 # all-zero local sha and no tree worth checking; if every ref is a deletion, skip.
 # The checks below read the working tree, so they only say something about a pushed commit