fix: issue that can let forbidden words avoid getting caught by hook

[GlimmerCape]

It seems that hook checks workspace instead of index, so someone can accidentally commit sensitive data or forbidden words

➜  qubership-envgene git:(feature/remove-ns-build-filter) ✗ git --no-pager diff
diff --git a/AGENTS.md b/AGENTS.md
index ca62048c..82ba02ee 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -1,4 +1,3 @@
-metadata.netcracker.com
 # AI Agent Rules for qubership-envgene Repository

 This document contains guidelines and rules for AI coding assistants working with this repository.
➜  qubership-envgene git:(feature/remove-ns-build-filter) ✗ git --no-pager diff --staged
diff --git a/AGENTS.md b/AGENTS.md
index 82ba02ee..ca62048c 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -1,3 +1,4 @@
+metadata.netcracker.com
 # AI Agent Rules for qubership-envgene Repository

 This document contains guidelines and rules for AI coding assistants working with this repository.
➜  qubership-envgene git:(feature/remove-ns-build-filter) ✗ git commit
hint: Waiting for your editor to close the file... error: There was a problem with the editor 'nvim'.
Please supply the message using either -m or -F option.
➜  qubership-envgene git:(feature/remove-ns-build-filter) ✗ git commit -m "fix: fix"
-e [QUBERSHIP] Calling CyberFerret checks for /home/kamelovn/workrepos/issue-1674/qubership-envgene
-e [QUBERSHIP] Calling /home/kamelovn/tools/global-git-hooks/hooks-global/../cyberferret-dist/cfcli-linux-amd64 /home/kamelovn/workrepos/issue-1674/qubership-envgene /home/kamelovn/workrepos/qubership-envgene/.git/worktrees/qubership-envgene7/cf_files.list
TEXT: Dictionary is up to date.
TEXT: Dictionary path: ~/.qubership/sensitive-signatures.encrypted
TEXT: Dictionary version: 1.38
TEXT: Scanning is in progress. Please wait.
TEXT: Total files scanned 167
TEXT: Scanning is finished in 1.461 seconds.
[feature/remove-ns-build-filter ec47d99a] fix: fix
 1 file changed, 1 insertion(+)