feat: bring repo up to REPO_POLICIES standards

- Create cmd/webhooker/main.go with fx dependency injection wiring
- Add REPO_POLICIES.md, .editorconfig, .dockerignore
- Add .gitea/workflows/check.yml for CI (docker build on push)
- Rewrite Makefile with all required targets (test, lint, fmt, fmt-check,
  check, build, hooks, docker, clean, dev, run, deps)
- Rewrite Dockerfile with sha256-pinned base images, golangci-lint
  installed from verified release archive, make check as build step
- Fix README.md: add required sections (description, getting started,
  rationale, design, TODO, license, author)
- Integrate TODO.md content into README.md and remove TODO.md
- Move config.yaml to configs/config.yaml.example
- Fix .gitignore pattern for webhooker binary
- Fix static/static.go embed directive (remove empty vendor dir)
- Fix database test to use in-memory config (no filesystem dependency)

closes #1
closes #2

.gitignore

@@ -4,7 +4,7 @@
 *.so
 *.dylib
 bin/
-webhooker
+/webhooker
 
 # Test binary, built with `go test -c`
 *.test
@@ -26,9 +26,10 @@ vendor/
 .DS_Store
 Thumbs.db
 
-# Environment files
+# Environment and config files
 .env
 .env.local
+config.yaml
 
 # Database files
 *.db