fix(security): harden worker approval, hook traversal, MCP exec, install scripts, git hooks

- orchestrate-codex-worker: drop yolo, default never approval, worktree containment
- run-with-flags-shell: add path traversal containment mirroring JS guard
- mcp-health-check: gate workspace probe, denylist dangerous env, shell-free reconnect with opt-in
- install.sh/ps1: add --ignore-scripts to block postinstall RCE
- git hooks: refuse global hooksPath clobber, remove file disable bypass, gate pre-push repo script execution
- claw.js: remove Windows shell:true, validate model token
- tests: opt into new secure defaults, quote-aware reconnect parsing

install.ps1

@@ -35,12 +35,13 @@ $scriptDir = Split-Path -Parent $scriptPath
 $installerScript = Join-Path -Path (Join-Path -Path $scriptDir -ChildPath 'scripts') -ChildPath 'install-apply.js'
 
 # Auto-install Node dependencies when running from a git clone
+# SECURITY: --ignore-scripts blocks preinstall/postinstall RCE from a compromised dependency.
 $nodeModules = Join-Path -Path $scriptDir -ChildPath 'node_modules'
 if (-not (Test-Path -LiteralPath $nodeModules)) {
     Write-Host '[ECC] Installing dependencies...'
     Push-Location $scriptDir
     try {
-        & npm install --no-audit --no-fund --loglevel=error
+        & npm install --ignore-scripts --no-audit --no-fund --loglevel=error
         if ($LASTEXITCODE -ne 0) {
             Write-Error "npm install failed with exit code $LASTEXITCODE"
             exit $LASTEXITCODE