BLD-001 K1: wire make gate + predict-check into pre-push; CI guard-tree calls the same entry #4791

Problem. make gate (pmat verify → scripts/guard_tree.sh --no-cargo → scripts/gate_touched_crates.sh) and make predict-check exist in the Makefile, but .githooks/pre-push runs only cargo deny/audit/doc and pmat comply (the last one with || true). CI's guard-tree takes a different path, through the fat_driver sections. Bookkeeping-class reds (counts, census, generated files) therefore reach CI. Each one costs a full CI cycle (62–242 min).

Change.

1. Wire make gate and make predict-check into .githooks/pre-push.
2. Make CI's guard-tree call the same scripts/guard_tree.sh entry, so local and CI cannot drift.
3. The local run must finish in under 5 min, so it needs a fast subset. The subset is local only: the CI guard-tree is not shrunk or skipped.

Metric. Bookkeeping-class CI reds from about 28 to 0; at least 90% caught before the push; pre-push p90 under 5 min.

Falsifier. A planted count mismatch is refused by pre-push (RED), and the same tree without the plant passes (GREEN).

Approved by one quorum round on 2026-10-05 (degraded: same-family; lanes claude-sonnet-5-5 ×2 + claude-haiku-4-5, author claude-opus-5-5). Parent: BLD-001 epic.