Block risky git commands in Claude Code with one PreToolUse hook

An agent with shell access will eventually try git push --force or git reset --hard when it gets...