git-customs. Client-side, cross-host pre-push gate that catches PII and secrets — using an engine you choose — before anything reaches a public remote.