fix(checkpoint-remote): withhold from the manual checkpoint push

PushCheckpoints (from main's manual push policy) resolved push settings but never checked the withhold, so naming checkpoints with an unroutable checkpoint_remote sent them to the push remote. It now returns the withhold error with the refs left queued, and flushCheckpointRefs refuses a withheld store itself so a new caller cannot reopen the path.