fix(hooks): anchor hook commands + project paths to $CLAUDE_PROJECT_DIR

Hook commands previously used relative paths like
`node .claude/hooks/<name>/index.mts`, which resolved against the
session cwd. When cwd drifted into a subpackage, Node couldn't find
the hook module and the Stop hook crashed with MODULE_NOT_FOUND.

Two changes (where applicable):

1. settings.json: rewrite every hook command from
   `node .claude/hooks/foo/index.mts` to
   `node "$CLAUDE_PROJECT_DIR"/.claude/hooks/foo/index.mts`. Claude
   Code injects $CLAUDE_PROJECT_DIR on every hook run.

2. auth-rotation-reminder + setup-security-tools: replace
   `process.cwd()` with `process.env.CLAUDE_PROJECT_DIR ?? process.cwd()`
   for project-local file lookups (.snooze, .env.local). Same root
   cause — process.cwd() is unreliable, the env var is canonical.

Mirrors socket-repo-template@1dbd8e2.

Author: jdalton

.claude/hooks/auth-rotation-reminder/index.mts

@@ -69,16 +69,18 @@ const STATE_FILE = path.join(STATE_DIR, 'last-run')
 const GLOBAL_SNOOZE = path.join(STATE_DIR, 'snooze')
 const GLOBAL_SKIP_LIST = path.join(STATE_DIR, 'services-skip')
 
-// Project-local files live at the repo root next to .claude/. Claude
-// Code spawns Stop hooks with the working directory set to the repo
-// root so process.cwd() is reliable here.
+// Project-local files live at the repo root next to .claude/. Use
+// CLAUDE_PROJECT_DIR (Claude Code injects this on every hook run) so
+// the paths stay correct regardless of session cwd — process.cwd()
+// drifts when the user navigates into a subpackage.
+const PROJECT_DIR = process.env['CLAUDE_PROJECT_DIR'] ?? process.cwd()
 const PROJECT_SNOOZE = path.join(
-  process.cwd(),
+  PROJECT_DIR,
   '.claude',
   'auth-rotation.snooze',
 )
 const PROJECT_SKIP_LIST = path.join(
-  process.cwd(),
+  PROJECT_DIR,
   '.claude',
   'auth-rotation.services-skip',
 )

.claude/settings.json

@@ -6,15 +6,15 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node .claude/hooks/check-new-deps/index.mts"
+            "command": "node \"$CLAUDE_PROJECT_DIR\"/.claude/hooks/check-new-deps/index.mts"
           },
           {
             "type": "command",
-            "command": "node .claude/hooks/logger-guard/index.mts"
+            "command": "node \"$CLAUDE_PROJECT_DIR\"/.claude/hooks/logger-guard/index.mts"
           },
           {
             "type": "command",
-            "command": "node .claude/hooks/path-guard/index.mts"
+            "command": "node \"$CLAUDE_PROJECT_DIR\"/.claude/hooks/path-guard/index.mts"
           }
         ]
       },
@@ -23,19 +23,19 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node .claude/hooks/private-name-guard/index.mts"
+            "command": "node \"$CLAUDE_PROJECT_DIR\"/.claude/hooks/private-name-guard/index.mts"
           },
           {
             "type": "command",
-            "command": "node .claude/hooks/public-surface-reminder/index.mts"
+            "command": "node \"$CLAUDE_PROJECT_DIR\"/.claude/hooks/public-surface-reminder/index.mts"
           },
           {
             "type": "command",
-            "command": "node .claude/hooks/release-workflow-guard/index.mts"
+            "command": "node \"$CLAUDE_PROJECT_DIR\"/.claude/hooks/release-workflow-guard/index.mts"
           },
           {
             "type": "command",
-            "command": "node .claude/hooks/token-guard/index.mts"
+            "command": "node \"$CLAUDE_PROJECT_DIR\"/.claude/hooks/token-guard/index.mts"
           }
         ]
       }
@@ -45,11 +45,11 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node .claude/hooks/auth-rotation-reminder/index.mts"
+            "command": "node \"$CLAUDE_PROJECT_DIR\"/.claude/hooks/auth-rotation-reminder/index.mts"
           },
           {
             "type": "command",
-            "command": "node .claude/hooks/stale-process-sweeper/index.mts"
+            "command": "node \"$CLAUDE_PROJECT_DIR\"/.claude/hooks/stale-process-sweeper/index.mts"
           }
         ]
       }