feat: managed git update hooks

[bctnry]

this allows certain features to be implemented cleanly, e.g.:

• webhooks (which already exists and uses update hooks)
• per-repo web ui cache
• proper cicd