ci: add harness file linter (#1549)

* ci: add harness file linter

* ci: address harness linter review feedback

* ci: cover codex harness config linting

* ci: tighten harness lint opt-ins

* ci: expand harness lint coverage

* ci: address harness linter review feedback

* ci: fix harness linter review followups

* ci: lint claude settings harness config

* ci: tighten harness linter coverage

* ci: fail malformed harness toml

---------

Co-authored-by: root <root@kandev.ts.net>

Makefile

@@ -423,6 +423,7 @@ test-scripts:
 	@bash scripts/pr-state.test.sh
 	@bash scripts/opencode-code-review.test.sh
 	@python3 scripts/opencode-code-review.test.py
+	@python3 scripts/lint-harness-files.test.py
 	@bash scripts/release-desktop.test.sh
 
 .PHONY: test-e2e
@@ -467,7 +468,7 @@ test-e2e-ci:
 #
 
 .PHONY: lint
-lint: lint-backend lint-web
+lint: lint-backend lint-web lint-harness
 	@printf "\n$(GREEN)$(BOLD)✓ Linting complete!$(RESET)\n"
 
 .PHONY: lint-backend
@@ -480,6 +481,11 @@ lint-web:
 	@printf "$(CYAN)Linting web app...$(RESET)\n"
 	@cd $(APPS_DIR) && $(PNPM) --filter @kandev/web lint
 
+.PHONY: lint-harness
+lint-harness:
+	@printf "$(CYAN)Linting harness files...$(RESET)\n"
+	@python3 .github/scripts/lint-harness-files.py --all
+
 .PHONY: lint-format
 lint-format:
 	@printf "$(CYAN)Checking formatting...$(RESET)\n"