align checkpoint policy push target

Sync pre-push checkpoint policy from the same resolved push target used for checkpoint refs so configured checkpoint remotes are enforced consistently.

Thread the checkpoint logging context through policy checks that can block condensation or finalization.