Freshness assets, commit-based metrics, and CI hygiene

.github/workflows/file-freshness.yml

@@ -38,7 +38,11 @@ jobs:
         run: uv sync --frozen --extra dev
 
       - name: Generate freshness artifacts
-        run: uv run --active python scripts/repo_file_freshness.py
+        run: >
+          uv run --active python scripts/repo_file_freshness.py
+          --metric commits
+          --green-max-commits 5
+          --yellow-max-commits 20
 
       - name: Configure git author
         run: |
@@ -47,7 +51,7 @@ jobs:
 
       - name: Commit and push (if changed)
         run: |
-          git add docs/repo_file_status_report.md file_freshness.json freshness_summary.json freshness_ignore.json
+          git add docs/repo_file_status_report.md assets/file_freshness.json assets/freshness_summary.json assets/freshness_ignore.json
           if git diff --staged --quiet; then
             echo "No freshness changes to commit."
             exit 0

.pre-commit-config.yaml

@@ -49,7 +49,8 @@ repos:
     hooks:
       - id: detect-secrets
         args: ["--baseline", ".secrets.baseline"]
-        exclude: ^template/.*\.jinja$
+        # Jinja templates contain secret-like placeholders; freshness JSON embeds git SHAs.
+        exclude: ^(template/.*\.jinja|assets/file_freshness\.json)$
 
   - repo: https://github.com/pre-commit/pre-commit-hooks
     rev: v5.0.0