Copilot setup steps: install husky hooks after npm ci

The repo's .npmrc sets `ignore-scripts = true` to mitigate supply-chain
attacks, which also blocks this project's own `prepare` script from
running. So `npm ci` leaves the husky pre-commit hooks (phpstan-diff,
PHPCS) uninstalled. Run `npm run prepare` explicitly so the agent's
commits get the same hook coverage as a local contributor's.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: westonruter

.github/workflows/copilot-setup-steps.yml

@@ -37,6 +37,11 @@ jobs:
           cache: npm
       - name: npm install
         run: npm ci
+      - name: Install husky git hooks
+        # The repo's .npmrc sets `ignore-scripts = true`, so `npm ci` skips the
+        # `prepare` script that wires up husky. Run it explicitly so the agent's
+        # commits get the pre-commit hooks (phpstan-diff, PHPCS) applied.
+        run: npm run prepare
       - name: Composer install
         run: composer install --no-interaction --no-progress
       - name: Build assets