first-push question: refuse an unchecked push answered manual

When the hook could not save the ref list, answering manual let that same push through, though it might be a --mirror sending what the user just chose to keep. Refuse it as the next push would be. Also cover the old-hook warning when a stored manual policy wins the race, which the outer-push check now gives.