Development record

`.abcd/development/brief/04-surfaces/37-embargo.md:88-91` says the check refuses the store's location on this machine, and `abcd embargo check --help` and `commands/embargo.md:144` say the same. `buildDenySet` returns at `internal/core/embargo/check.go:735` when nothing is under embargo, before it adds the store's path, so a text naming the path passes while the stores hold no unpublished advisory.