chore: make Custodian CLI resolution deterministic

Add setup support for installing Custodian and console commands onto PATH, and make pre-push hooks resolve custodian-multi from the system command before falling back to repo-local virtualenvs.

Co-Authored-By: Codex CLI (GPT-5) <noreply@openai.com>

Author: ProtocolWarden

.console/log.md

@@ -52,3 +52,7 @@ truth; pre-push catches regressions before they hit GitHub.
 
 - Updated repo-owned references from the previous GitHub username to `ProtocolWarden` after the account rename.
 - Scope: license headers, GitHub URLs, workflow install commands, manifests, dependency URLs, examples, and local owner defaults where present.
+
+## 2026-05-10 — Custodian pre-push command resolution
+
+- Updated the pre-push guard to prefer system `custodian-multi`, with repo venv and sibling Custodian venv fallbacks.

.hooks/pre-push

@@ -7,11 +7,31 @@
 # Bypass intentionally: git push --no-verify
 set -e
 
-if ! command -v custodian-multi >/dev/null 2>&1; then
-    echo "[custodian-pre-push] custodian-multi not on PATH — skipping audit guard"
-    echo "    install with: pip install git+https://github.com/ProtocolWarden/Custodian.git@main"
+repo_root="$(git rev-parse --show-toplevel)"
+workspace_root="$(cd "$repo_root/.." && pwd)"
+
+custodian_multi=""
+if command -v custodian-multi >/dev/null 2>&1; then
+    custodian_multi="$(command -v custodian-multi)"
+fi
+
+for candidate in \
+    "$custodian_multi" \
+    "$repo_root/.venv/bin/custodian-multi" \
+    "$repo_root/.warehouse-venv/bin/custodian-multi" \
+    "$workspace_root/Custodian/.venv/bin/custodian-multi"
+do
+    if [ -x "$candidate" ]; then
+        custodian_multi="$candidate"
+        break
+    fi
+done
+
+if [ -z "$custodian_multi" ]; then
+    echo "[custodian-pre-push] custodian-multi not found — skipping audit guard"
+    echo "    install with: python -m pip install -e /home/dev/Documents/GitHub/Custodian"
     exit 0
 fi
 
 echo "[custodian-pre-push] running audit guard..."
-custodian-multi --repos . --fail-on-findings --no-color
+"$custodian_multi" --repos "$repo_root" --fail-on-findings --no-color