Guards

The review gate as a tool.check function hook. Every shell call is decided in process, so the non-commit calls -- almost all of them -- cost no subprocess at all, and a blocked commit can be put to you as a question instead of refused outright. The decision itself is still bin/review-gate, run only for a command that mentions a commit, so both routes read the same receipts and cannot disagree.