Republish of the Windows hook-path fix. 2.0.1 on npm was published from a
feature branch that predated cc81c67, so it shipped the old guard
(`startsWith(allowedBase + "/")`) which always reports "escapes its base
directory" on Windows — the safety hook never ran, so `rm -rf` was not blocked.

2.0.2 is built from main and includes:
- fix: Windows compatibility for hooks and cli tool (#75)
- fix(index): align google provider startup check to GEMINI_API_KEY (#63)
- fix(tool-loader): image output from declarative tools via data URI (#62)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>