A Plugin Update Can Add Shell Hooks the Model Never Sees

HookPry shows agent harnesses will run new lifecycle-hook commands after a trusted plugin update, with no model decision and almost no scanner coverage.