Plug model rule in development flow and extend it

[tarekziade]

This is a follow-up from #44174

We're now plugging the tool into developer flow:

• add an opt-in github hook for checking the model
• automatically run make check-model-rules on PRs to generate reports
• add a ref to the CLI in the AI agents files
• fix models that are in allow lists and can be fixed