feat(repos): git-fingerprint-based machine-independent repo identity

Add git_fingerprint (root commit SHA-1) to managed_repos as a stable,
machine-independent identifier — identical across every clone regardless
of checkout path, remote URL, or SSH alias.

- Migration n1i2j3k4l5m6: adds git_fingerprint column + non-unique index
  (non-unique to support repos that share ancestry via forks/splits)
- GET /repos/by-fingerprint?hash=<sha>[&remote_url=<url>]: lookup by
  fingerprint; optional remote_url disambiguates shared-ancestry repos
- GET /repos/by-remote?url=<url>: fallback lookup by remote URL
- consistency_check.py --here [PATH]: auto-detects repo slug from any
  local checkout via fingerprint (falls back to remote URL), then auto-
  registers host_paths[hostname] so subsequent runs need no override
- --all now includes repos with host_paths[current_hostname], not just
  those with local_path
- fix-consistency-here / check-consistency-here Makefile targets
- Fixed _api_get bug: httpx strips query strings when params={} is passed
- Backfilled fingerprints for 14 repos on this host

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Makefile

@@ -203,6 +203,22 @@ fix-consistency-remote:
 	  $(if $(NO_WRITEBACK),--no-writeback,); \
 	  e=$$?; [ $$e -eq 2 ] && exit 0 || exit $$e
 
+## Infer repo slug from git remote URL and check: make check-consistency-here [REPO_PATH=/path/to/repo]
+## Omit REPO_PATH to use the Python script's CWD (i.e. pass an empty --here flag).
+check-consistency-here:
+	uv run python scripts/consistency_check.py \
+	  --here $(if $(REPO_PATH),"$(REPO_PATH)",) \
+	  $(if $(API_BASE),--api-base "$(API_BASE)",); \
+	  e=$$?; [ $$e -eq 2 ] && exit 0 || exit $$e
+
+## Infer repo slug from git remote URL and fix: make fix-consistency-here [REPO_PATH=/path/to/repo]
+fix-consistency-here:
+	uv run python scripts/consistency_check.py \
+	  --here $(if $(REPO_PATH),"$(REPO_PATH)",) \
+	  --fix \
+	  $(if $(API_BASE),--api-base "$(API_BASE)",); \
+	  e=$$?; [ $$e -eq 2 ] && exit 0 || exit $$e
+
 ## Check all registered repos for ADR-001 consistency
 check-consistency-all:
 	uv run python scripts/consistency_check.py --all $(if $(API_BASE),--api-base "$(API_BASE)",); \