Ambient core.hooksPath can bypass the update hook that rejection tests
install. Select the repository's hooks directory locally so those tests
exercise actual rejected pushes even under hostile global configuration.
Assume repository-local configuration overrides global hooksPath. Production
hook policy and push authorization are intentionally unchanged.
Validation: nix develop -c env GIT_CONFIG_GLOBAL=<hostile fixture> cargo test
--test git_push_promotion_race passed all ten tests with hooksPath=/dev/null.
Assisted-by: GPT-6