feat: workspace-bootstrap — init SSH/git/Cursor для Mac и Windows

Единый workspace.local.env для адресов и паролей, init-machine,
Set-GitRemotes, push-safe и check-no-secrets для политики kalinamall/github.

scripts/workspace-bootstrap/hooks/pre-push

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+# Git pre-push: проверка секретов только для remote github
+set -Eeuo pipefail
+
+remote="${1:-}"
+url="${2:-}"
+
+[[ $remote == github ]] || exit 0
+
+# Найти bootstrap от корня репо
+repo_root=$(git rev-parse --show-toplevel)
+checker=""
+
+for candidate in \
+    "$repo_root/scripts/workspace-bootstrap/scripts/check-no-secrets.sh" \
+    "$repo_root/../reverse-proxy/scripts/workspace-bootstrap/scripts/check-no-secrets.sh" \
+    "$HOME/Documents/Cursor/Projects/reverse-proxy/scripts/workspace-bootstrap/scripts/check-no-secrets.sh"; do
+    if [[ -f $candidate ]]; then
+        checker=$candidate
+        break
+    fi
+done
+
+if [[ -z $checker ]]; then
+    echo "pre-push: check-no-secrets.sh не найден — пропуск проверки"
+    exit 0
+fi
+
+exec bash "$checker" github