Get the shared CI green

[lispandfound]

Stacked on #218. Second of three.

Takes the shared workflow from "adopted" to "passing", and adds a lefthook config so it stays that way without a round trip through Actions.

The lockfile was the big one

uv.lock pinned numba 0.53.1 (March 2021). Its llvmlite 0.36 refuses to build on anything past Python 3.9:

RuntimeError: Cannot install on Python version 3.13.15; only versions >=3.6,<3.10 are supported.
hint: `numba` (v0.53.1) was included because `im-calculation` depends on
      `qcore-utils` which depends on `numba`

uv sync therefore died in deptry, pytest and typecheck alike — all three Python-job failures on #217 were this one line. Relocked, and as asked the whole lock is upgraded alongside it, dev tooling included: ruff 0.16.1 → 0.16.7, ty 0.0.66 → 0.0.80, qcore-utils 2026.6.1 → 2026.8.2, numpy 2.5.1 → 2.5.3, plus hypothesis, coverage, dask, scipy and the transitive set behind them.

Everything else the workflow was failing

Check	Fix
ruff format --check	Two files had never been formatted — the old ruff.yml ran ruff check only.
cargo fmt --all --check	Also never run. Edition 2024 sorts use groups lowercase-last and stopped indenting trailing comments to the previous expression.
deptry	DEP002 dask. It is never imported: xarray dispatches to it when apply_ufunc(..., dask="parallelized") gets a dask-backed array, which is what the lazy extra exists for. Recorded as a per-rule ignore with that reasoning.
ty check	The # ty: ignore[invalid-argument-type] on the invalid-shape test no longer suppresses anything, and ty reports the dead directive.
numpydoc lint	Seven kernel helpers in IM/ims.py and one in IM/snr_calculation.py had a summary line and no Parameters/Returns. Written in the style _rotd_kernel and _components already use.

.python-version pins 3.13. The retired test.yml pinned it via setup-python; the shared workflow has no such step, so uv was picking whatever the runner happened to offer.

lefthook

Ported from ucgmsim/nzcvm, with three changes:

• Split into pre-commit and pre-push. Upstream runs everything on pre-push against {staged_files} — but nothing is staged at push time. Verified against the real config: five of its seven commands print (skip) no files for inspection, and the two that do not reference the template (clippy, rustfmt) instead run over the whole crate on every push. Autofix now runs on pre-commit over {staged_files}, where stage_fixed can do something; the gates run on pre-push over {push_files}, lefthook's pre-push equivalent.
• Added ruff-format, numpydoc and rustfmt. The shared workflow gates on all three; the nzcvm config predates it. Between them they cover most of what is fixed above.
• Fixed the yaml glob. *.{yaml, yml} has a space inside the alternation, so the second branch only ever matched a file literally named * yml — the hook never fired on a .yml. Now *.{yaml,yml}. All three are worth carrying back to nzcvm.

Install with uvx lefthook install. This branch was pushed through its own pre-push hook.

The vale command from the nzcvm config is deliberately not here: it lands with the vale config itself in PR 3, rather than pointing at a .vale.ini that does not exist yet.

Two configs follow from that hook set:

• .yamllint.yml — with the yaml glob fixed the hook now actually runs, and yamllint's defaults flag things Actions requires: no --- document start, on: read as the YAML 1.1 boolean, and long ${{ }} expressions.
• .gitignore — had no entry for target/, *.egg-info/, .coverage, htmlcov/, __pycache__/ or any tool cache. With hooks working off staged files, git add -A hoovering those up is a live hazard.

Verified locally

On Python 3.13, every job the shared workflow runs: ruff check, ruff format --check, deptry ., ty check, numpydoc lint, cargo fmt --all --check, cargo clippy --all-targets -- -D warnings, cargo test, cargo test --doc, and pytest --cov=IM tests — 62 passed, 97% coverage against the 95% gate.

🤖 Generated with Claude Code