make verify: add the Lens pass container (both apps, cheapest first)

Root verify runs check first, then a per-app verify in each Makefile: sensor
slots hooked to VERIFY_SENSORS (empty today, so nothing is claimed that is not
run) and then that app's suite. Measured: 9.9s wall, app 178 + blogex 156 tests.

Makefile

@@ -2,7 +2,7 @@
 
 MISE_BIN ?= mise
 
-.PHONY: check precommit deps compile test test-elisp format
+.PHONY: check precommit deps compile test test-elisp format verify
 
 # Cheap static gate over both apps, cheapest first. No database, no coverage:
 # this is the loop you run freely while working and before every commit.
@@ -17,6 +17,16 @@ check:
 # Precommit target for CI/pre-commit hooks
 precommit: check
 
+# The Lens pass: everything `check` does, plus the heavy sensors and both test
+# suites, cheapest first. `.githooks/pre-push` runs this before every push (see
+# `make hooks`); run it yourself before handing off. Bypass deliberately with
+# `git push --no-verify`.
+verify: check
+	@echo "==> verify: app"
+	@$(MAKE) -C app MISE_BIN=$(MISE_BIN) verify
+	@echo "==> verify: blogex"
+	@$(MAKE) -C blogex MISE_BIN=$(MISE_BIN) verify
+
 # Sync dependencies
 deps:
 	@make -C app deps