chore(deps): update dependency python/cpython to v3.14.7

See merge request !1771

Adds a reusable `ensure-claude-md` pre-commit hook that keeps AGENTS.md
and CLAUDE.md paired, with AGENTS.md as the canonical source.

For each changed AGENTS.md/CLAUDE.md, the hook inspects its directory:

- AGENTS.md present, CLAUDE.md missing -> create CLAUDE.md containing
  `@AGENTS.md`.
- AGENTS.md present, CLAUDE.md lacks the reference -> prepend `@AGENTS.md`.
- CLAUDE.md present, AGENTS.md missing -> error, since AGENTS.md is the
  canonical source (non-destructive; never creates or deletes AGENTS.md).

When it creates or modifies a file it exits non-zero and asks the user to
review and re-stage, matching the repo's other file-mutating hooks.

The hook is published in .pre-commit-hooks.yaml for downstream consumers,
documented in docs/pre-commit.md, and enabled locally as a repo: local
hook in .pre-commit-config.yaml.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Rewrite CLAUDE.md in place (cat over the existing file) instead of
`mv`-ing a mktemp file onto it. The previous approach replaced the
destination inode with the temp file's, silently resetting the file
mode to mktemp's restrictive 0600 default (e.g. a 644 file became 600).

Addresses MR review feedback. Uses an in-place rewrite rather than
`chmod --reference` since that flag is GNU-only and unavailable on the
macOS/BSD chmod many contributors run pre-commit with.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

feat: add ensure-claude-md pre-commit hook

See merge request !1781

feat: add ensure-claude-md pre-commit hook

See merge request !1781

## [4.44.0](https://gitlab.com/[secure]/gl-infra/common-ci-tasks/-/compare/...) (2026-08-17)

### Features

* add ensure-claude-md pre-commit hook ([a2590b1b](https://gitlab.com/[secure]/gl-infra/common-ci-tasks/-/commit/a2590b1ba9c244c12c75f66917c906a88641ba31))

### Fixes

* preserve CLAUDE.md permissions when prepending reference ([7658125b](https://gitlab.com/[secure]/gl-infra/common-ci-tasks/-/commit/7658125b101e89c707b3a75ec06573299b3e8166))

### Dependencies

* **deps:** update dependency python/cpython to v3.14.7 ([ab2ea00a](https://gitlab.com/[secure]/gl-infra/common-ci-tasks/-/commit/ab2ea00a5e398d28b38169d881413d6ce03ad64c))