How are you managing git & gh access with Agents?

A developer tightened Git and GitHub access so AI agents can read data without full write authority.

They moved pushes to a passphrase-protected SSH key and made `gh` mostly read-only.

A global pre-push hook now asks for human confirmation before any push goes through.

The setup aims to prevent accidental PRs and unauthorized changes while keeping automation useful.