Port of the PFVCluster gate to the global PreToolUse copy (all lanes):
prod-target remote.sh/remote-dns.sh invocations block without a filed
GLPI Change id (.crush/active-cr); dev-lane targets exempt; CR tooling
exempt. JSON error payload per house style. Functionally verified.
https://projects.knownelement.com/issues/767#note-4191
Machine-optimal global AGENTS.md (symlinked at ~/.config/AGENTS.md, picked
up by every crush lane) covering the alpha/beta/uat/prod doctrine
(prod = human release only), strict SDLC (red/green TDD, adversarial
review, code/tests/docs/ticket sync), gitea-redmine-discourse
cross-linking, and the 2026-08-31 rulings (no JOURNAL.md, sparse
STATUS.md, rolling table HUD).
Global enforcement layer: repo-scoped ticket-gate (crush PreToolUse,
all lanes) + universal git pre-commit/pre-push (core.hooksPath) that
delegate to repo-local check-rules.sh and chain installed .git/hooks.