feat: bring repo up to REPO_POLICIES standards

- Create cmd/webhooker/main.go with fx dependency injection wiring
- Add REPO_POLICIES.md, .editorconfig, .dockerignore
- Add .gitea/workflows/check.yml for CI (docker build on push)
- Rewrite Makefile with all required targets (test, lint, fmt, fmt-check,
  check, build, hooks, docker, clean, dev, run, deps)
- Rewrite Dockerfile with sha256-pinned base images, golangci-lint
  installed from verified release archive, make check as build step
- Fix README.md: add required sections (description, getting started,
  rationale, design, TODO, license, author)
- Integrate TODO.md content into README.md and remove TODO.md
- Move config.yaml to configs/config.yaml.example
- Fix .gitignore pattern for webhooker binary
- Fix static/static.go embed directive (remove empty vendor dir)
- Fix database test to use in-memory config (no filesystem dependency)

closes #1
closes #2

internal/database/database_test.go

@@ -7,10 +7,35 @@ import (
 	"git.eeqj.de/sneak/webhooker/internal/config"
 	"git.eeqj.de/sneak/webhooker/internal/globals"
 	"git.eeqj.de/sneak/webhooker/internal/logger"
+	pkgconfig "git.eeqj.de/sneak/webhooker/pkg/config"
+	"github.com/spf13/afero"
 	"go.uber.org/fx/fxtest"
 )
 
 func TestDatabaseConnection(t *testing.T) {
+	// Set up in-memory config so the test does not depend on config.yaml on disk
+	fs := afero.NewMemMapFs()
+	testConfigYAML := `
+environments:
+  dev:
+    config:
+      port: 8080
+      debug: false
+      maintenanceMode: false
+      developmentMode: true
+      environment: dev
+      dburl: "file::memory:?cache=shared"
+    secrets:
+      sessionKey: d2ViaG9va2VyLWRldi1zZXNzaW9uLWtleS1pbnNlY3VyZSE=
+      sentryDSN: ""
+configDefaults:
+  port: 8080
+`
+	if err := afero.WriteFile(fs, "config.yaml", []byte(testConfigYAML), 0644); err != nil {
+		t.Fatalf("Failed to write test config: %v", err)
+	}
+	pkgconfig.SetFs(fs)
+
 	// Set up test dependencies
 	lc := fxtest.NewLifecycle(t)
 
@@ -39,8 +64,8 @@ func TestDatabaseConnection(t *testing.T) {
 		t.Fatalf("Failed to create config: %v", err)
 	}
 
-	// Set test database URL
-	c.DBURL = "file:test.db?cache=shared&mode=rwc"
+	// Override DBURL to use a temp file-based SQLite (in-memory doesn't persist across connections)
+	c.DBURL = "file:" + t.TempDir() + "/test.db?cache=shared&mode=rwc"
 
 	// Create database
 	db, err := New(lc, DatabaseParams{