push-is-publication

Local commits are cheap and reversible; `git push` is publication — once on origin, CI runs, deploys trigger, downstream consumers may act on it, and other sessions see it as truth. In AI-augmented workflows where an agent may generate many commits autonomously, treat push as a deliberate review-the