Shell hooks that run before or after tool calls — block dangerous commands, auto-format, push metrics, gate commits.