Avoids version mismatch between pre-commit's pinned Black and CI's latest Black. All hooks now use local system tools for consistency.
- Black (auto-fix formatting on commit) - Flake8 (block on syntax errors and undefined names) - Bandit (security scan, non-blocking to match CI) - Tests (run on pre-push only) - Apply Black formatting fixes caught by the new hooks