PreToolUse hook — validates Bash commands through agent-callable deny-by-default policy before execution