pre-push-tags is an unlisted release GATE: put it through gate admission or move it off the release path #4943

What: the local tag guard (scripts/hooks/pre-push-tags.sh, being landed on main by #4942) can block a release: it refused the v0.70.2 tag push on 2026-10-07 and the v0.70.3 tag push on 2026-10-09. Under the GATE/LAB rule, a check that can block a release is a GATE. This one went into force through a local install. It has not been through the gate-admission process (operator yes, three green nights on main, one gate retired for each one added), and it is not in the release-stopping check list (tag stage 5/5).

Done when one of these holds:

• the guard goes through admission: a yes, three green nights, and one tag-stage entry out so the tag stage stays at 5/5; it then appears in the in-code check list; or
• it is moved off the release path (for example, it refuses only non-release tag pushes).

#4942 goes ahead regardless: it adds only an accept path and no new refusal (quorum guard-c324, C 3/3).

Refs #4942, #4926.

🤖 Generated with Claude Code