enforce pre-commit checks in CI, add verify-copyright hook

[jameslamb]

Contributes to rapidsai/build-planning#135

Working on #86, I ran pre-commit run --all-files locally and was surprised to see some unrelated changes made. It looks like this is because pre-commit checks aren't enforced in CI here.

This proposes the following:

• update all pre-commit hooks to their latest versions (pre-commit autoupdate)
• add shellcheck and verify-copyright hooks
• enforce in CI that pre-commit must pass

This should slightly improve our confidence in ✅ from CI for this project.

[jameslamb]

/merge