Read-only Git inspection capabilities plus an explicit-only Git delivery pack (stage/unstage/commit/ branch/conflict-check/delivery-prepare) and a host-managed worktree service for coding agents