distgit: Schedule a weekly check of the update hooks

This allows ensuring over time that all repositories have the right
update hooks set up.

roles/distgit/meta/main.yml

@@ -1,5 +1,6 @@
 ---
 dependencies:
+- { role: git/checks }
 - { role: git/hooks }
 - { role: git/make_checkout_seed }
 - { role: git/server }

roles/distgit/tasks/main.yml

@@ -68,6 +68,12 @@
   - config
   - distgit
 
+- name: schedule the update hook check
+  cron: >
+    name="check-update-hooks" cron_file="ansible-check-update-hooks"
+    minute=0 hour=0 weekday=3
+    user=nobody
+    job="MAILTO={{git_check_perms_mailto | "root"}} PATH=/usr/bin:/usr/local/bin git check-perms --check=update-hook {{ git_basepath | "/git"}}"
 
 # -- Gitolite --------------------------------------------
 # This is the permission management for package maintainers, using Gitolite.