RM-01 — Reproducible checkout

Task/ref: RM-01 (docs/remediation/TASKS.md, internal mission tracking)
Objective: make checkout/install/typecheck hooks fail on code rather than environmental residue, for root CI and non-root seats.
Scope: pnpm store configuration, transactional Husky installation, dependency/generated-state preflight, checkout regression tests, developer documentation.
Constraints: isolated worktree; no skip-switch fixes; no writes under /root or /tmp; workers do not edit docs/remediation/TASKS.md; author does not review or merge.
Acceptance: AC1–AC8 from the orchestrator dispatch/addendum.
Plan:
1. Add RED-first tests for missing dependencies, stale/foreign .next, and interrupted hook installation.
2. Implement environment-overridable HOME-based pnpm store defaults, deterministic preflight, and transactional hook installation.
3. Run focused tests, install/build/baseline gates, and explicit AC negative controls.
4. Obtain independent review, push after queue guard, open PR, and send evidence to mos-remediation.
Budget: orchestrator estimate 6K/60K; no explicit hard token cap. Keep scope to RM-01 and avoid unrelated cleanup.
Risks: 97%-full shared /tmp; native dependency install size; root-owned fixtures may require Docker for realistic verification.

Progress / evidence

Worktree created at /home/hermes/agent-work/rm-01 from origin/main 06e0d403.
/tmp baseline: 28G used, 889M available (97%); worktree and planned store are on /home.
Root causes confirmed from source: committed .npmrc pins /root; prepare invokes Husky directly; web typecheck includes generated .next types without validating ownership/freshness.