Commit signing (SSH), history purge, branch hygiene, and pre-commit universal guard for Monozen repos.