Adds a pre-commit hook that runs skopeo inspect on every From("...")
image reference in ci/main.go when that file is staged, catching
non-existent tags locally before they reach CI.
Closes#407
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>