[eslint config] [base] add `id-denylist` rule