Block pushes and commits to main with git hooks

pre-push rejects any push that would update refs/heads/main, however the
command is spelled; pre-commit and pre-merge-commit refuse commits while
main is checked out. npm install enables them via core.hooksPath. The
README documents the three layers of protection for main.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.githooks/pre-merge-commit

@@ -0,0 +1,2 @@
+#!/bin/sh
+exec "$(dirname "$0")/pre-commit"