feat: add block-no-verify PreToolUse hook to .claude/settings.json

[tupe12334]

Problem

Claude Code agents can silently bypass git hooks by running git commit with the hook-skip flag. This disables pre-commit, commit-msg, and pre-push hooks — which matters especially here since Superset already runs pre-commit via a PreToolUse hook.

Solution

Add block-no-verify as a PreToolUse Bash hook in .claude/settings.json. It reads tool_input.command from the Claude Code hook stdin payload, detects the hook-bypass flag across all git subcommands, and exits 2 to block the attempt before git even runs.

The existing pre-commit runner hook is preserved unchanged.

---

Disclosure: I am the author and maintainer of block-no-verify.