tidy checkpoint policy telemetry git hook

Extract the duplicated unreadable-policy skip path in the git hook into a shared helper, and cover the agent write-hook label mapping with a table test.