refactor: remove local pre-commit config, use centralized config and tfroot-runner

Author: xnoto

.github/workflows/opentofu.yml

@@ -17,7 +17,7 @@ jobs:
     uses: makeitworkcloud/shared-workflows/.github/workflows/opentofu.yml@main
     with:
       runs-on: arc-dind
-      container: image-registry.openshift-image-registry.svc:5000/public-registry/runner:latest
+      container: image-registry.openshift-image-registry.svc:5000/public-registry/tfroot-runner:latest
       setup-ssh: true
     secrets:
       SOPS_AGE_KEY: ${{ secrets.SOPS_AGE_KEY }}

.pre-commit-config.yaml

@@ -0,0 +1,31 @@
+# Agent Instructions
+
+## Repository Purpose
+
+OpenTofu root module for libvirt/KVM infrastructure.
+
+## Push Access
+
+Agents are authorized to push directly to `main` in this repository.
+
+## Pre-commit Configuration
+
+Pre-commit configuration is **centralized** in `makeitworkcloud/images/tfroot-runner/pre-commit-config.yaml`. The CI workflow fetches this config at runtime.
+
+**Do not** create or modify `.pre-commit-config.yaml` in this repository.
+
+For local development, run:
+```bash
+curl -sSL -o .pre-commit-config.yaml \
+  https://raw.githubusercontent.com/makeitworkcloud/images/main/tfroot-runner/pre-commit-config.yaml
+make test
+```
+
+## Special Configuration
+
+This repo uses `arc-dind` runner with an internal OpenShift registry image (`tfroot-runner`) because it requires SSH access to libvirt hosts.
+
+## Related Repositories
+
+- `images` - Contains tfroot-runner image and canonical pre-commit config
+- `shared-workflows` - Contains the reusable OpenTofu workflow