Destructive Command Guard

As agents get more shell access, one bad command can delete a branch, force push, or trash a machine. This Rust hook sits in front of Claude Code, Codex, Cursor, and similar tools and blocks destructive git and shell patterns before they run. The value is simple: keep agents fast without giving them free rein to break production or local state.