Function Hooks (Mods) integration in Claude Code keeps moving forward
This commit makes tool.check respect deny rules from settings, so user-installed Mods can’t override them by default
It also adds allowModsToOverrideDenyRules, which admins can explicitly enable through managed settings