Split CI into pre-commit/test/build workflows for branch protection

Branch protection on this repo will require the contexts
ci/woodpecker/pr/pre-commit, ci/woodpecker/pr/test and
ci/woodpecker/pr/build, mirroring the node-lookup workflow layout.

- Adds .woodpecker/pre-commit.yaml running pre-commit via uvx
- Adds .pre-commit-config.yaml mirroring node-lookup (vendored
  web/static assets excluded)
- Adds .woodpecker/test.yaml with vet + gofmt check + race tests
- Reworks build.yaml to compile via make build plus the existing
  buildx dry-run image check, PR events only
- Renames docker.yaml to release.yaml per node-lookup convention
  (tag-driven docker release unchanged)

.woodpecker/pre-commit.yaml

@@ -0,0 +1,18 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: pre-commit
+    image: git.unkin.net/unkin/almalinux9-gobuilder:20260606
+    commands:
+      - uvx pre-commit run --all-files
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2