"""The `check` domain — repo consistency gates, run by the pre-push hook.

These are the highest-frequency commands in the tree and the most
timing-sensitive, since they run on every push. Nothing here should acquire a
heavy module-level import.
"""