#!/usr/bin/env bash
# pre-push → orders secret (full history) → build (full next build) → test
# Note: git pushes a branch HEAD; scanning full history catches secrets
# committed in the past that a re-fetch of a bare repo would inherit.
exec bash "$(git rev-parse --show-toplevel)/scripts/gate/gate.sh" push