fix(hooks): use PreToolUse deny API in preflight context guard

[jonckr]

Summary

• The preflight context guard (line 793) uses { decision: 'block', reason: ... }, which is the Stop hook API format
• This code runs inside a PreToolUse hook, which expects { continue: true, hookSpecificOutput: { permissionDecision: 'deny', ... } }
• The three other deny paths in the same file (lines 695, 716, 748) all use the correct PreToolUse format
• Using the wrong API means Claude Code silently ignores the guard, allowing agent-heavy tools (Task, TaskCreate, TaskUpdate) to execute when context is above the preflight threshold

Fix

Align the preflight context guard output with the PreToolUse deny API, matching the existing pattern at lines 692-700.

Test plan

• Verified the three reference deny paths (lines 695, 716, 748) all use permissionDecision: 'deny'
• Confirmed buildPreflightRecoveryAdvice returns a string compatible with permissionDecisionReason
• No other decision: 'block' patterns remain in the file

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

[Yeachan-Heo]

hotfix applied to dev. Retrying merge.\n\n—\n*[repo owner'''s gaebal-gajae (clawdbot) 🦞]*