chore: synchronize with latest pyproject-template

[endavis]

Description

Synchronize project with latest pyproject-template improvements following the AI Sync Checklist.

Related Issue

Addresses #482

Type of Change

• Code refactoring
• Chore / maintenance

Changes Made

Phase 3: pyproject.toml

• Added ruff per-file-ignores for tools/opnsense-parser.py and tools/pyproject_template/*.py

Phase 5: Doit Tasks

• Added tools/ to lint, format, spell check, and bandit scan targets
• Cleaned up string concatenation in git.py
• Removed unnecessary cmd variable in quality.py task_type_check
• Refactored install.py to use create_install_task() from template framework
• Refactored install_tools.py: adopted generic framework (get_latest_github_release, install_tool, create_install_task) and reimplemented project-specific tools (age, terraform, opentofu) using shared helpers
• Auto-formatted infrastructure.py (ruff now covers tools/)

Phase 6: AGENTS.md

• Added emoji indicators to headings (⚠️ Core Mandate, ⚠️ Mandatory Protocols)
• Improved Decision Framework table with ✅ ⚠️ 🚫 status icons
• Added ❌/✅ prefixes to Prohibited/Correct reasoning examples
• Expanded Task Planning Protocol to numbered checklist
• Expanded Blocked Protocol with examples
• Added "What NOT to do" section for Dependabot PRs
• Added "Temporary Files" section (tmp/agents/<type>/ convention)
• Typography improvements (→ arrows, ≠ symbol)

Phase 7: Pre-commit

• Added commented-out exclusion hints for check-added-large-files and detect-private-key

Phase 8: AI Hooks

• Added commented-out sandbox_mode and network_access hints to .codex/config.toml

Phase 10: Sync

• Marked sync point at template commit 75cbe9b

Testing

• doit check passes (all checks)
• No source code changes — tooling and config only

Checklist

• My code follows the code style of this project (ran doit format)
• I have run linting checks (doit lint)
• I have run type checking (doit type_check)
• All new and existing tests pass (doit test)
• My changes generate no new warnings

[github-actions]

Benchmark

Details

Benchmark suite	Current: 8b0be7d	Previous: 482dc64	Ratio
tests/benchmarks/test_placeholder.py::test_import_time	6338.331177465948 iter/sec (stddev: 0.000035300431259638925)	7365.802725990653 iter/sec (stddev: 0.00000874050089396922)	1.16

This comment was automatically generated by workflow using github-action-benchmark.

[github-actions]

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.10.

Benchmark suite	Current: 8b0be7d	Previous: 482dc64	Ratio
tests/benchmarks/test_placeholder.py::test_import_time	6338.331177465948 iter/sec (stddev: 0.000035300431259638925)	7365.802725990653 iter/sec (stddev: 0.00000874050089396922)	1.16

This comment was automatically generated by workflow using github-action-benchmark.