janitor: git and GitHub hygiene

Everything here is grounded in actual git/gh output: never assumed. Destructive operations (history rewrite, force push, branch deletion) are the user's explicit call, always.

Prerequisites

A git repository to work in, plus gh authenticated only when the task touches the remote. No repo → say so; hygiene of a non-repo is a different job (usually unslop).

Authority and action classes