[hooks] add non-streaming (non-stdin style) shell-only PreToolUse support

[eternal-openai]

• add PreToolUse hook for bash-like tool execution only at first
• block shell execution before dispatch with deny-only hook behavior
• introduces common.rs matcher framework for matching when hooks are run

example run:

› run three parallel echo commands, and the second one should echo "[block-pre-tool-use]" as a test


• Running the three echo commands in parallel now and I’ll report the output directly.

• Running PreToolUse hook: name for demo pre tool use hook

• Running PreToolUse hook: name for demo pre tool use hook

• Running PreToolUse hook: name for demo pre tool use hook

PreToolUse hook (completed)
  warning: wizard-tower PreToolUse demo inspected Bash: echo "first parallel echo"
  
PreToolUse hook (blocked)
  warning: wizard-tower PreToolUse demo blocked a Bash command on purpose.
  feedback: PreToolUse demo blocked the command. Remove [block-pre-tool-use] to continue.

PreToolUse hook (completed)
  warning: wizard-tower PreToolUse demo inspected Bash: echo "third parallel echo"

• Ran echo "first parallel echo"
  └ first parallel echo

• Ran echo "third parallel echo"
  └ third parallel echo

• Three little waves went out in parallel.

  1. printed first parallel echo
  2. was blocked before execution because it contained the exact test string [block-pre-tool-use]
  3. printed third parallel echo

  There was also an unrelated macOS defaults warning around the successful commands, but the echoes
  themselves worked fine. If you want, I can rerun the second one with a slightly modified string so
  it passes cleanly.

[pakrym-oai]

Is this message too specific (bash)?

[pakrym-oai]

I quite dislike this hardcoding and arg re-parsing here.

[pakrym-oai]

What do you think about individual tool handlers invoking hooks?

[pakrym-oai]

unrelated?

[pakrym-oai]

nit: is this loop just being repeated per hook type is there a way to make it into a method?