Post-BEACH Machine Git allowlist reconciliation: manage BEACH OMR firewall source; no runtime change