pre-push(17.7): prove it on the audit's three repositories

Rerun records, serve-static and unrolled/secure (same planted commits) with
this build installed from its wheel: 6 replays and 10 hook pushes, all exit 0
in 0.69-1.21 s against the 30 s deadline, input read proven per run. The
planted JS eval in a new file surfaces in the quick tier on the host and, in
one Docker engine run (190.9 s, deadline 300), as two advisory engine findings
classified new/file_added_in_head. The planted Python %-formatted SQL is still
missed (no quick rule, no host engine): recorded as a coverage gap, no rule
edited. Go is named as not covered. The run caught a wrong install hint in
the hook (the package is not on PyPI); corrected here.
Record: benchmarks/measurements/2026-10-02-pre-push-operational-1/record.json

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo

ops/pre-push

@@ -13,7 +13,7 @@ fi
 command=${OUSAST_COMMAND:-ousast}
 if ! command -v "$command" >/dev/null 2>&1; then
     echo "ousast: pre-push check did not run: '$command' is not on PATH." \
-        "Install it with 'pip install openultrasast' or set OUSAST_COMMAND. Push continues."
+        "Install it (pip install git+https://github.com/norandom/OpenUltraSAST) or set OUSAST_COMMAND. Push continues."
     if [ -e "$prior" ] || [ -L "$prior" ]; then
         exec "$prior" "$@"
     fi