chore(ci): add missing container-tag/container-suffix and fix stale standards doc

Add container-tag and container-suffix parameters to all reusable
workflow jobs (audit, quality, security, test, version) in ci.yml.
Fix repository-standards.md: correct git hooks path from sibling
vergil-tooling checkout to .githooks, replace bundle exec rake with
vrg-docker-run -- vrg-validate, remove stale --agent and --docs-only
flags, fix --linkage default from Fixes to Ref.

Addresses vergil-project/vergil-tooling#1015, vergil-project/vergil-tooling#1013

Co-Authored-By: Claude <noreply@anthropic.com>

Author: wphillipmoore

.github/workflows/ci.yml

@@ -31,6 +31,8 @@ jobs:
     with:
       language: ruby
       versions: ${{ inputs.ruby-versions || '["3.2", "3.3", "3.4"]' }}
+      container-suffix: ruby
+      container-tag: 'latest'
 
   integration-tests:
     name: "test / integration / ${{ matrix.ruby-version }}"
@@ -72,13 +74,17 @@ jobs:
     with:
       language: ruby
       versions: ${{ inputs.ruby-versions || '["3.2", "3.3", "3.4"]' }}
+      container-suffix: ruby
+      container-tag: 'latest'
 
   security:
     uses: vergil-project/vergil-actions/.github/workflows/ci-security.yml@v2.0
     with:
       language: ruby
       run-standards: ${{ inputs.run-release != 'false' }}
       run-security: ${{ inputs.run-security != 'false' }}
+      container-suffix: ruby
+      container-tag: 'latest'
     permissions:
       contents: read
       security-events: write
@@ -88,9 +94,13 @@ jobs:
     with:
       language: ruby
       versions: ${{ inputs.ruby-versions || '["3.2", "3.3", "3.4"]' }}
+      container-suffix: ruby
+      container-tag: 'latest'
 
   version:
     uses: vergil-project/vergil-actions/.github/workflows/ci-version-bump.yml@v2.0
     with:
       language: ruby
       run-release: ${{ inputs.run-release != 'false' }}
+      container-suffix: ruby
+      container-tag: 'latest'

docs/repository-standards.md

@@ -14,14 +14,14 @@
 - Before modifying any files, check the current branch with `git status -sb`.
 - If on `develop`, create a short-lived `feature/*` branch or ask for explicit approval to proceed on `develop`.
 - If approval is granted to work on `develop`, call it out in the response and proceed only for that user-approved scope.
-- Enable repository git hooks before committing: `git config core.hooksPath ../vergil-tooling/scripts/lib/git-hooks`.
+- Enable repository git hooks before committing: `git config core.hooksPath .githooks`.
 
 ## Local validation
 
 Canonical local validation command:
 
 ```bash
-bundle exec rake
+vrg-docker-run -- vrg-validate
 ```
 
 ## Tooling requirement
@@ -53,14 +53,13 @@ and PR submission. Do not construct commit messages or PR bodies manually.
 
 ```bash
 vrg-commit \
-  --type TYPE --message MESSAGE --agent AGENT \
+  --type TYPE --message MESSAGE \
   [--scope SCOPE] [--body BODY]
 ```
 
 - `--type` (required): one of
   `feat|fix|docs|style|refactor|test|chore|ci|build`
 - `--message` (required): commit description
-- `--agent` (required): `claude` or `codex`
 - `--scope` (optional): conventional commit scope
 - `--body` (optional): detailed commit body
 
@@ -73,17 +72,16 @@ The script resolves the correct `Co-Authored-By` identity from
 vrg-submit-pr \
   --issue NUMBER --summary TEXT \
   [--linkage KEYWORD] [--title TEXT] \
-  [--notes TEXT] [--docs-only] [--dry-run]
+  [--notes TEXT] [--dry-run]
 ```
 
 - `--issue` (required): GitHub issue number (just the number)
 - `--summary` (required): one-line PR summary
-- `--linkage` (optional, default: `Fixes`):
+- `--linkage` (optional, default: `Ref`):
   `Fixes|Closes|Resolves|Ref`
 - `--title` (optional): PR title (default: most recent commit
   subject)
 - `--notes` (optional): additional notes
-- `--docs-only` (optional): applies docs-only testing exception
 - `--dry-run` (optional): print generated PR without executing
 
 The script detects the target branch and merge strategy