From: Alessio Attilio <alessio.attilio@protonmail.com>

Introduce 'hooks.allowNoVerify' as an opt-in workflow guardrail to
prevent accidental bypass of hooks with '--no-verify' when set to false.
Authoritative enforcement remains server-side.

Signed-off-by: Alessio Attilio <alessio.attilio@protonmail.com>

Submitted-As: https://lore.kernel.org/git/pull.2215.git.1788365862670.gitgitgadget@gmail.com