chore: update rhiza to v1.3.2

[tschm]

Sync of the development infrastructure from the mother repo.

• Template: jebel-quant/rhiza
• Ref: v1.3.0 → v1.3.2
• Files changed by the sync: 23 (21 modified, 3 added — .rhiza/tests/test_readme.py, .rhiza/tests/test_release_tags.py, tests/test_rhiza_packaging.py), plus .rhiza/template.yml and .rhiza/template.lock.
• Conflicts: none — the sync exited clean, no upstream/local merge resolution was needed.
• Left unstaged: nothing. The working tree held no changes outside the template-owned set.

Notable content: make.d/python.mk and make.d/test.mk were substantially reworked upstream, quality.mk and doctor.mk picked up smaller changes, and the rhiza_*.yml workflows each took a one-line bump.

Only template-owned paths are in this PR — staged mechanically from .rhiza/template.lock's files list, never git add --all.

No gates were run — /update syncs only. Run /rhiza:quality for a scorecard.

[Copilot]

Pull request overview

Syncs this repository’s Rhiza-managed development infrastructure from jebel-quant/rhiza v1.3.0 to v1.3.2, updating the template lock and bringing in upstream changes to CI workflows, Makefile gates, and the Rhiza test suite.

Changes:

• Bump Rhiza template ref/lock to v1.3.2 and update reusable workflow pins accordingly.
• Rework Makefile gate ownership (move core Python gates into python.mk, keep optional extras in test.mk, add a rhiza-test runner).
• Expand the synced test surface with new core .rhiza/tests modules and a new “fresh repo” packaging/version invariant test in tests/.

Reviewed changes

Copilot reviewed 24 out of 25 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
tests/test_rhiza_packaging.py	Adds a baseline packaging invariant test to ensure installed distribution version matches pyproject.toml.
cliff.toml	Refines commit-skip patterns to avoid incorrectly dropping dependency bump commits from release notes.
.rhiza/tests/test_release_tags.py	Adds a core test asserting the newest tag is reachable from a branch.
.rhiza/tests/test_readme.py	Adds core README checks (file presence/readability + bash fence parse validation).
.rhiza/tests/test_readme_validation.py	Narrows this module to Python-executable README fence validation; core bash/README existence checks moved out.
.rhiza/tests/test_pyproject.py	Updates pyproject checks to rely on shared core fixtures/tests for tag reachability and documents dependency-group expectations.
.rhiza/tests/README.md	Updates suite documentation to reflect new per-bundle ownership and split of README checks.
.rhiza/tests/conftest.py	Extends shared fixtures with latest_tag for cross-layer release/tag assertions.
.rhiza/template.yml	Bumps template ref to v1.3.2.
.rhiza/template.lock	Updates sync SHA/ref and records newly synced files.
.rhiza/make.d/test.mk	Removes core Python gates from the optional tests bundle; keeps only optional testing extras targets.
.rhiza/make.d/quality.mk	Switches formatting gate to prek and adds a rhiza-test target to run .rhiza/tests.
.rhiza/make.d/python.mk	Centralizes Python’s primary gates (test, typecheck, security, docs-coverage) and renames the dep gate to deps with a deprecated deptry alias.
.rhiza/make.d/doctor.mk	Adjusts doctor target structure to allow layered doctor:: rules and updates output formatting.
.pre-commit-config.yaml	Bumps rhiza-hooks revision and updates hook-related commentary.
.github/workflows/rhiza_weekly.yml	Pins reusable workflow to v1.3.2.
.github/workflows/rhiza_scorecard.yml	Pins reusable workflow to v1.3.2.
.github/workflows/rhiza_mutation.yml	Pins reusable workflow to v1.3.2.
.github/workflows/rhiza_marimo.yml	Pins reusable workflow to v1.3.2.
.github/workflows/rhiza_fuzzing.yml	Pins reusable workflow to v1.3.2.
.github/workflows/rhiza_codeql.yml	Pins reusable workflow to v1.3.2.
.github/workflows/rhiza_ci.yml	Pins reusable workflow to v1.3.2.
.github/workflows/rhiza_book.yml	Pins reusable workflow to v1.3.2.
.github/workflows/rhiza_benchmark.yml	Pins reusable workflow to v1.3.2.
.github/pull_request_template.md	Updates checklist to reference make deps instead of make deptry.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.