Function detect_unauthorized_commit 

pub fn detect_unauthorized_commit(repo_root: &Path) -> bool

Detect unauthorized commits by comparing current HEAD against stored OID.

Returns true if HEAD has changed (indicating an unauthorized commit), false if HEAD matches or comparison is not possible.