v0.5.2

Hook reliability fixes, no policy or engine changes.

• The settings snippet from toolgate init uses the absolute path to the binary; Claude Code spawns hooks with a minimal PATH, so a bare toolgate hook could silently never run.
• toolgate init saves your API key to ~/.toolgate/env (0600) and the hook reads it, so gating works even when Claude Code is launched from the Dock without your shell profile.
• If the decision model is unreachable in passthrough mode, the hook now shows [toolgate] NOT gating: <reason> instead of staying silent.

npm: npm install -g @riskaverse/toolgate@0.5.2