fix: Address golangci-lint errors (errcheck, gosec) (#76)

Apply PR #76 from dannomayernotabot:

- Add golangci exclusions for internal package false positives
- Tighten file permissions (0644 -> 0600) for sensitive files
- Add ReadHeaderTimeout to HTTP server (slowloris prevention)
- Explicit error ignoring with _ = for intentional cases
- Add //nolint comments with justifications
- Spelling: cancelled -> canceled (US locale)

Co-Authored-By: dannomayernotabot <noreply@github.com>

🤖 Generated with Claude Code

internal/cmd/up.go

@@ -80,8 +80,8 @@ func runUp(cmd *cobra.Command, args []string) error {
 	}
 
 	// Get session names
-	deaconSession, _ := getDeaconSessionName()
-	mayorSession, _ := getMayorSessionName()
+	deaconSession := getDeaconSessionName()
+	mayorSession := getMayorSessionName()
 
 	// 2. Deacon (Claude agent)
 	if err := ensureSession(t, deaconSession, townRoot, "deacon"); err != nil {