feat(RMGR-WP-0002): dual-run writeback, flags, meter, SH facade

Add dual-run flags/meter, harden task-status (idempotency, UUID, head,
push), State Hub adapter for PATCH /tasks and C-15/reconcile proxy, pilot
evidence, and finish RMGR-WP-0002.

src/repo_manager/gitops.py

@@ -64,3 +64,21 @@ def commit_paths(
     if not sha:
         raise GitError("commit succeeded but HEAD missing")
     return sha
+
+
+def push_ff(repo: Path) -> tuple[bool, str]:
+    """Best-effort push (push-seal compatible). Never force-pushes."""
+    try:
+        proc = subprocess.run(
+            ["git", "push"],
+            cwd=repo,
+            capture_output=True,
+            text=True,
+            timeout=60,
+            check=False,
+        )
+        if proc.returncode == 0:
+            return True, (proc.stdout.strip() or "pushed")
+        return False, (proc.stderr.strip() or proc.stdout.strip() or "push failed")
+    except Exception as exc:  # noqa: BLE001
+        return False, str(exc)