Note

Introduces optional auto-chmod for hook commands and updates execution flow to receive app configuration.

• Adds --allow-auto-chmod CLI flag and ALLOW_AUTO_CHMOD env (default false) threaded through AppFlags
• Updates makeSureCallable and handleHook to accept AppFlags; when enabled, attempts chmod 0755 on permission denied with explicit security warnings
• Refactors executor: deprecates NewHookExecutor (now panics) and adds NewHookExecutorWithFunc to inject a wrapper around handleHook that includes appFlags; server now uses this wrapper
• Adjusts hook handler creation to wrap handleHook; maintains concurrency/timeout behavior
• Updates tests to use the new constructor and new function signatures; adds coverage for auto-chmod enabled/disabled paths

^{Written by Cursor Bugbot for commit 9697b07. This will update automatically on new commits. Configure here.}