pre-push: refuse a push that sends a held checkpoint by commit

Under manual, lines whose source is not a full ref name are compared with waiting checkpoint tips.