refs/notes/ai push is rejected by enterprise Git hooks because notes commits use hard-coded git-ai <git-ai@local> and empty messages