chore: allow direct pushes to main

Remove the protect-main pre-push guard so main can be pushed directly,
and update the CLAUDE.md git-workflow note to match.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

CLAUDE.md

@@ -86,4 +86,4 @@ Tests use `database.NewTestDB(t)` for in-memory SQLite with full schema. Test au
 
 ## Git Workflow
 
-Direct push to `main` is blocked by lefthook — use feature branches and PRs. Pre-commit runs vet, lint, codegen check, and frontend typecheck in parallel. Pre-push runs the full test suite.
+Feature branches and PRs are the norm, but direct pushes to `main` are allowed. Pre-commit runs vet, lint, codegen check, and frontend typecheck in parallel. Pre-push runs the full test suite.

lefthook.yml

@@ -31,17 +31,6 @@ pre-commit:
 pre-push:
   parallel: true
   commands:
-    protect-main:
-      run: |
-        branch=$(git rev-parse --abbrev-ref HEAD)
-        if [ "$branch" = "main" ]; then
-          echo "Direct push to main is not allowed. Use a pull request instead."
-          exit 1
-        fi
-      skip:
-        - merge
-        - rebase
-
     go-test:
       glob: "*.go"
       run: go test -tags webkit2_41 -race -count=1 -timeout 120s ./...