pub fn git_command(repo: &Path) -> CommandExpand description
Base git command against repo with the bridge’s subprocess
hygiene applied: GIT_TERMINAL_PROMPT=0 (a credential prompt must
fail cleanly, never hang a CI run) and user hooks neutralized via
core.hooksPath pointed at the platform null device (a
core.hooksPath in user config must not run arbitrary hooks
against the private staging mirror). User/system gitconfig is
otherwise INHERITED on purpose: credential helpers, core.sshCommand,
and proxy settings live there and remote fetch/push need them —
none of it can affect translation output (mkit generates every
object byte itself).