chore: standardize husky hooks

- Fix pre-commit to use `pnpm lint --staged` (was using `pnpm run precommit`)
- Add documentation to ALLOWED_PUBLIC_KEY explaining it's the official
  Socket public test API key and intentionally identical across repos

Author: jdalton

.husky/pre-commit

@@ -2,7 +2,7 @@
 .husky/security-checks.sh
 
 if [ -z "${DISABLE_PRECOMMIT_LINT}" ]; then
-  pnpm run precommit
+  pnpm lint --staged
 else
   echo "Skipping lint due to DISABLE_PRECOMMIT_LINT env var"
 fi

.husky/security-checks.sh

@@ -10,7 +10,9 @@ YELLOW='\033[1;33m'
 GREEN='\033[0;32m'
 NC='\033[0m'
 
-# Allowed public API key (used in socket-lib).
+# Allowed public API key (used in socket-lib and across all Socket repos).
+# This is Socket's official public test API key - safe to commit.
+# NOTE: This value is intentionally identical across all Socket repos.
 ALLOWED_PUBLIC_KEY="sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api"
 
 echo "${GREEN}Running Socket Security checks...${NC}"