Pre-receive with require_signed_commits forks one process per commit #100

cmd/gitbayd/hook.go:29 runs rev-list --not --all then one cat-file process per new commit and ships every raw commit as one JSON message over the hook socket (internal/hookd/hookd.go:297). A 50k-commit initial push to a protected branch forks 50k processes and builds the payload in memory.

Remedy: cat-file --batch and stream verification per commit.