fail closed on unreadable checkpoint policy

Treat malformed local checkpoint policy refs as read errors for checkpoint-data writers and strategy checkpoint work.

Agent hooks surface read-specific disabled-checkpoint messages, while Git hooks skip checkpoint work without blocking Git.