fix checkpoint policy remote edge cases

Propagate ancestry traversal errors instead of treating cancellation as divergence.

Clean up the temporary policy fetch ref on read failures and isolate git config in the remote policy tests that exercise git subprocesses.