Git pre-push guardian