checkpoint resume: address PR review feedback

Tighten the checkpoint-prefix shape gate: a ULID's leading timestamp character cannot exceed 7, so requiring [0-7] stops revision syntax like HEAD from shape-matching and triggering store lookups. Isolate git config env in the worktree-clash test, which shells out to the git CLI.