pub const ENFORCE_COMMAND: &str = "gate --pre-tool-use";Expand description
The enforcement subcommand marker. Matched only when the command’s program
token is also truth-mirror (see is_own_enforcement_command), so preserved
--config/--state-dir variants match but foreign hooks never do.