Lint (patch-aware by default)

Runs this repo's real lint gate — the custom golangci-lint binary with the lintroller plugin (.custom-gcl.yml), the same one .github/workflows/codeql.yml's lint-golangci job runs — and fixes what it finds.

Default mode: patch-aware

Run:

atmos fix lint