pub async fn reset_hard(repo_path: &Path) -> Result<()>
Honors the repository’s own config, filter drivers included, so it must be trusted.