Git notes - #137

Add a testable git notes helper that validates the ref, commit ID, and Agent Trace JSON before piping content to git notes add -f -F -. Cover configured refs, blank input rejection, command construction, and command failure context.

Plan: agent-trace-git-notes
Tasks: T02, T03

Co-authored-by: SCE <sce@crocoder.dev>

Write validated post-commit Agent Trace JSON
to the configured git-notes ref after DB insertion
succeeds, skip explicit non-git VCS contexts,
and log note-write failures without failing the hook.

Co-authored-by: SCE <sce@crocoder.dev>

Record the completed Agent Trace git-notes context update and final validation, including current post-commit behavior for config precedence and setup-installed hooks.

Plan: agent-trace-git-notes

Tasks: T05, T06

Co-authored-by: SCE <sce@crocoder.dev>

Expose policies.agent_trace.push_notes.enabled with default true across schema generation, config parsing, runtime resolution, and config show output. Update current-state context for the new config surface.\n\nPlan: agent-trace-git-notes-auto-push\nTask: T01

Co-authored-by: SCE <sce@crocoder.dev>

Adds an injectable helper for pushing the configured Agent Trace notes ref with validation, structured outcome data, and focused tests around command construction and failure context.

Plan: agent-trace-git-notes-auto-push
Task: T02

Co-authored-by: SCE <sce@crocoder.dev>

Wire post-commit Agent Trace persistence to attempt a silent best-effort push of the configured notes ref after local git-note writes succeed, while honoring the push-notes opt-out and preserving fail-open behavior on push errors.

Plan: agent-trace-git-notes-auto-push
Task: T03

Co-authored-by: SCE <sce@crocoder.dev>

Cites plan agent-trace-git-notes-auto-push; updates T04 and T05.

Co-authored-by: SCE <sce@crocoder.dev>