chore: prune monorepo residue from config and docs

[cristim]

Refs #2097. This PR covers part of the issue. Three items are left open on purpose:

• Item 9 is help text in cmd/configure_azure.go and cmd/configure_gcp.go. Both files are touched by open PRs (fix(configure-azure): stop printing the new service principal's client secret (A10-028) #2212 and fix(cli): delete the minted GCP key when the credentials upload panics #2233).
• Item 10 would make gocyclo and Snyk gating in ci.yml. That changes what blocks CI, so it needs an owner decision.
• Item 11 is in CLAUDE.md, which docs(claude): coordinate parallel work through issue assignment #2202 is editing.

Summary

This PR removes config and doc entries that only made sense in the monorepo. Before each removal I checked with git ls-files and ls that its target does not exist in this repo.

Item	Change
1	.golangci.yml: removed the exclusions for internal/testutil/ and internal/api/ (revive), and the misspell cancelled|initialised rule. All of them were scoped to internal/ or pkg/ paths.
3	.gitignore: removed the frontend/* and Playwright entries.
5	.pre-commit-config.yaml: dropped the check-yaml exclude. Its docker-compose, cloudformation and iac targets don't exist, and check-yaml passes on the workflow files without it.
7	NOTICE: removed aws-lambda-go, pgx, pgxmock, golang-migrate and testcontainers. None of them is in go.mod or go.sum. The remaining notices all match current dependencies.
8	docs/cli/cloud-setup.md and docs/cli/README.md: the server, self-hosted, deploy-workflow, ci-cd-permissions/ and terraform/environments/ references now point at cloud-commitments-platform. This also removes the dead README anchor.
12	CONTRIBUTING.md: ./cudly --help prints no version, so the bug-report guidance now asks for the commit SHA or release tag instead.

These items were already fixed on main: item 2 (#2218), item 4 (no stale .gitallowed comments remain) and item 6 (the Makefile and gosec-hook.sh both use scripts/run-gosec.sh).

Evidence

All runs are local, on macOS.

• pre-commit run --all-files passes, including markdownlint and check-yaml.
• golangci-lint config verify is clean, and golangci-lint v2.10.1 run ./... reports 0 issues.
• scripts/test-git-secrets-allowlist.sh passes 44/44.
• make build passes.
• An independent non-author reviewer (sonnet, high) did two passes. They checked every removed pattern against git ls-files, every NOTICE removal against go.mod/go.sum, and the doc links and wording. They found two lows: a leftover exclude, and two more residue passages in cloud-setup.md. Both are applied. The final confirmation found no actionable findings at ae20221.

🤖 Generated with Claude Code

[coderabbitai]

Warning

Review limit reached

• Run on-demand review

_{This review includes 7 billable files and costs up to $1.75.}

• Ask an admin to make reviews automatic

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Or wait 55 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available. Your 64 included PR review attempts over the past 7 days set your current allowance at 1 review per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: Repository: LeanerCloud/cloud-commitments-cli/.coderabbit.yaml
• Review profile: CHILL
• Plan: Essentials
• Run ID: ee122336-565b-419e-a0ec-7f86ec185fee

📥 Commits

Reviewing files that changed from the base of the PR and between 700ff43 and ae20221.

📒 Files selected for processing: 7

• .gitignore
• .golangci.yml
• .pre-commit-config.yaml
• CONTRIBUTING.md
• NOTICE
• docs/cli/README.md
• docs/cli/cloud-setup.md

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[cristim]

Independent review verdict: CLEAN at ae20221

Reviewer: fresh Claude agent, not the author. Coordinator: claude-cc-reviewer.

• .golangci.yml: none of the excluded paths (internal/*, pkg/ladder, internal/mocks, internal/purchase, internal/testutil) exist here; the repo has only cmd/, docs/ and scripts/. No Go file contains "cancelled" or "initialised". The CI-pinned golangci-lint v2.10.1 run ./... at this head reports 0 issues.
• .pre-commit-config.yaml: the removed exclude only affected check-yaml. No docker-compose, cloudformation or iac files exist here, and the newly covered .github/workflows/*.yml files parse.
• .gitignore: there is no frontend/ directory, so the removed entries were dead.
• NOTICE: go.mod/go.sum have no aws-lambda-go, pgx, pgxmock, golang-migrate or testcontainers entries, and nothing imports them, so removing the notices is license-safe.
• Docs: ./cudly --version gives "unknown flag", and --help prints no CLI version, so the CONTRIBUTING claim is accurate. The platform-repo links are correct.

Merge waits on CI being green at this SHA. (claude-cc-reviewer)

[cristim]

CR waived: quota, adversarial review + local verification + green CI. Merged at ae20221. (claude-cc-reviewer)