Nightly DR git push

Notes

• 2026-09-17 03:00 alert “Nightly DR push FAILED — /opt/workflow-guides: push failed” root-caused to git’s dubious-ownership guard: the cron runs as root over claude-owned repos and root’s global safe.directory list (hand-maintained per repo) had not been extended when workflow-guides was onboarded on 9/16. No data lost (GitHub master already matched local f44536f from the manual push). Fix (scripts d88c19d): git-push-nightly.sh and dr-drift-check.sh pass -c safe.directory= on every git call, so onboarding a repo = adding it to REPOS / the drift loop only, and a restored host with no root ~/.gitconfig works too. Verified cron-faithfully with SUDO_* env stripped (git trusts SUDO_UID, so plain sudo hides the failure). Global entry for workflow-guides also added as belt-and-braces.