add git-hook to reject force-push to master brunch