Git operations backed by [git2], with session-scoped write safety.
Read operations (status, log, diff) are always available. Write operations (commit, merge, worktree add/remove) are restricted to worktrees created by the current session — preventing one agent from destroying another's work.