chore: add commit hooks and CI check to block vendor DLLs and local config files

Author: JovanMarkov96

.githooks/prevent_sensitive_files.ps1

@@ -0,0 +1,15 @@
+#!/usr/bin/env pwsh
+# Prevent committing forbidden local files (PowerShell)
+$forbidden = '^\.mdt_dlls/|^mdt_devices\.json$|^mdt_probe\.json$'
+$staged = (& git diff --cached --name-only) -join "`n"
+$matches = @()
+foreach ($line in $staged -split "`n") {
+    if ($line -match $forbidden) { $matches += $line }
+}
+if ($matches.Count -gt 0) {
+    Write-Error "ERROR: Commit contains forbidden local files:"
+    $matches | ForEach-Object { Write-Output "  $_" }
+    Write-Output "These files should remain local only. To remove them from the index run:`n  git rm --cached <file>"
+    exit 1
+}
+exit 0

.githooks/prevent_sensitive_files.sh

@@ -0,0 +1,13 @@
+#!/bin/sh
+# Prevent committing forbidden local files
+forbidden='^\\.mdt_dlls/|^mdt_devices\\.json$|^mdt_probe\\.json$'
+staged=$(git diff --cached --name-only)
+echo "$staged" | grep -E "$forbidden" >/dev/null 2>&1
+if [ $? -eq 0 ]; then
+  echo "ERROR: Commit contains forbidden local files:" >&2
+  echo "$staged" | grep -E "$forbidden" >&2
+  echo "These files should remain local only. To remove them from the index run:" >&2
+  echo "  git rm --cached <file>" >&2
+  exit 1
+fi
+exit 0

.github/workflows/block_sensitive_files.yml

@@ -0,0 +1,23 @@
+name: Block Forbidden Files
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  check-forbidden-files:
+    name: Check for forbidden local files
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Fail if forbidden files are present
+        run: |
+          forbidden='(^\.mdt_dlls/|^mdt_devices\.json$|^mdt_probe\.json$)'
+          matches=$(git ls-files | grep -E "$forbidden" || true)
+          if [ -n "$matches" ]; then
+            echo "ERROR: Repository contains forbidden local files:" >&2
+            echo "$matches" >&2
+            exit 1
+          fi