Keep marketplace verification Git observations inert #525

🤖 Generated by the Agentic Engineer

Problem

Marketplace verification is documented as offline inspection of immutable Git objects, but a configured Git observation hook can execute during a successful verification. A harmless local marker reproduced the unexpected execution; the disabled-hook control produced the same verification result without it.

Reproduced against reviewed 739d01b using the actual command and isolated offline fixtures. This is one defect family; related input variants belong to this issue.

Proposed direction

Disable active filesystem observation hooks at the command boundary for release inspection. Preserve read-only verification and exact candidate/source/release checks.

Acceptance criteria

The real verifier returns VERIFIED for the valid control without invoking configured observation hooks. Negative release controls continue to refuse. Caller index, configuration and worktree state remain unchanged.

Size: Small.

Part of #101.