fix(#1821): stop copying dead hook scripts for Kilo and ZCode (hooksSurface:none)

Kilo and ZCode both declare `hooksSurface: 'none'` and have no plugin surface,
so the GSD installer staged lifecycle hook scripts (hooks/*.js, hooks/*.sh,
hooks/lib/) plus a `{"type":"commonjs"}` package.json marker into their config
dirs where nothing ever invokes them — dead weight (#1821).

The installer's two hook-copy guards at bin/install.js were still on the legacy
hardcoded runtime-name list and never excluded Kilo or ZCode. Add
`&& !isKilo && !isZcode` to both (isZcode added to the install() runtimeFlags
destructure).

OpenCode — which #1821 also named — is deliberately NOT excluded: since the
issue was filed, #1914 shipped a native OpenCode plugin (plugins/gsd-core.js)
that spawns those exact staged hooks via OpenCode's event bus and requires both
the hook scripts and the CommonJS package.json marker. Excluding OpenCode would
regress #1914, so its hooks stay live. The genuinely-dead cases are Kilo & ZCode.

- bin/install.js: add `&& !isKilo && !isZcode` to the hooks/dist copy guard and
  the hooks/lib copy guard; document the OpenCode-vs-Kilo/ZCode split.
- tests/install-minimal-hooks.test.cjs: regression test asserting Kilo and ZCode
  receive no gsd-*.js/.sh hooks or hooks/lib, while OpenCode keeps its hooks +
  #1914 plugin and Claude keeps its hooks (over-exclusion guard).
- tests/fixtures/golden-install-parity/{kilo,zcode}.json: drop the 21 hooks/*
  entries and the package.json marker they no longer receive (opencode unchanged).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

tests/fixtures/golden-install-parity/kilo.json

@@ -379,29 +379,7 @@
   "gsd-core/workflows/validate-phase.md": "557e3251e3b9349a",
   "gsd-core/workflows/verify-phase.md": "0d4ffabc1caa473a",
   "gsd-core/workflows/verify-work.md": "b68ac37f6301a3b5",
-  "hooks/gsd-check-update-worker.js": "c992bbad91d0e994",
-  "hooks/gsd-check-update.js": "fdd77abe7ef26a2d",
-  "hooks/gsd-config-reload.js": "96546e0e8bb47904",
-  "hooks/gsd-context-monitor.js": "2caaaf96d39fe742",
-  "hooks/gsd-cursor-post-tool.js": "9168e0a09de1972a",
-  "hooks/gsd-cursor-session-start.js": "9b2e6f4f0c405375",
-  "hooks/gsd-ensure-canonical-path.js": "3ce09b366839d324",
-  "hooks/gsd-graphify-update.sh": "e4c6e14fe6ad64ff",
-  "hooks/gsd-phase-boundary.sh": "32739d5fbe0d0a1c",
-  "hooks/gsd-prompt-guard.js": "a749b8cb2c5248de",
-  "hooks/gsd-read-guard.js": "9e423cd03e2d1b16",
-  "hooks/gsd-read-injection-scanner.js": "7792c420f1d72f11",
-  "hooks/gsd-session-state.sh": "e54379ba86bf1b6d",
-  "hooks/gsd-statusline.js": "a055020378003805",
-  "hooks/gsd-update-banner.js": "55143a25f978f301",
-  "hooks/gsd-validate-commit.sh": "bf5dd61d33cb3a38",
-  "hooks/gsd-workflow-guard.js": "91ae24a15d2bca6f",
-  "hooks/gsd-worktree-path-guard.js": "cb8b86e39a5d49e9",
-  "hooks/lib/git-cmd.js": "268ba15992ca0b23",
-  "hooks/lib/gsd-graphify-rebuild.sh": "66af89601074d2a9",
-  "hooks/managed-hooks-registry.cjs": "8a9f7633c6fe0ea0",
   "kilo.json": "13151e97ff23c1aa",
-  "package.json": "dbf8353f77358bc1",
   "scripts/changeset/README.md": "86ff89331dfd94b2",
   "scripts/changeset/cli.cjs": "68f92a344b199271",
   "scripts/changeset/github-release-notes.cjs": "795677f0c009b132",

tests/fixtures/golden-install-parity/zcode.json

@@ -379,28 +379,6 @@
   "gsd-core/workflows/validate-phase.md": "2c6d7671fcaabcaa",
   "gsd-core/workflows/verify-phase.md": "98a995046bdb6c3c",
   "gsd-core/workflows/verify-work.md": "34e980a6950cd83c",
-  "hooks/gsd-check-update-worker.js": "6660bcf03ed849a0",
-  "hooks/gsd-check-update.js": "901ea3bd75fd5bbc",
-  "hooks/gsd-config-reload.js": "96546e0e8bb47904",
-  "hooks/gsd-context-monitor.js": "9f969c172d1614a9",
-  "hooks/gsd-cursor-post-tool.js": "9168e0a09de1972a",
-  "hooks/gsd-cursor-session-start.js": "9b2e6f4f0c405375",
-  "hooks/gsd-ensure-canonical-path.js": "84e6b584da9805c4",
-  "hooks/gsd-graphify-update.sh": "e4c6e14fe6ad64ff",
-  "hooks/gsd-phase-boundary.sh": "32739d5fbe0d0a1c",
-  "hooks/gsd-prompt-guard.js": "a749b8cb2c5248de",
-  "hooks/gsd-read-guard.js": "9e423cd03e2d1b16",
-  "hooks/gsd-read-injection-scanner.js": "7d0344c1ef6dd0ab",
-  "hooks/gsd-session-state.sh": "e54379ba86bf1b6d",
-  "hooks/gsd-statusline.js": "c1056568acf6dfd2",
-  "hooks/gsd-update-banner.js": "55143a25f978f301",
-  "hooks/gsd-validate-commit.sh": "bf5dd61d33cb3a38",
-  "hooks/gsd-workflow-guard.js": "91ae24a15d2bca6f",
-  "hooks/gsd-worktree-path-guard.js": "635cbdc5cde5277b",
-  "hooks/lib/git-cmd.js": "268ba15992ca0b23",
-  "hooks/lib/gsd-graphify-rebuild.sh": "66af89601074d2a9",
-  "hooks/managed-hooks-registry.cjs": "49f1e3ea9e332097",
-  "package.json": "dbf8353f77358bc1",
   "scripts/changeset/README.md": "86ff89331dfd94b2",
   "scripts/changeset/cli.cjs": "68f92a344b199271",
   "scripts/changeset/github-release-notes.cjs": "795677f0c009b132",