put a `git` script in `PATH` that simply errors out i.e.: if "--no-verify" in sys.args: println("--no-verify is not allowed, file=sys.stderr)

put a `git` script in `PATH` that simply errors out i.e.: if "--no-verify" in sys.args: println("--no-verify is not allowed, file=sys.stderr) sys.exit(1) and otherwise forwards to the underlying `git`