fix(hooks): anchor POSIX user-scope hook commands to $HOME - #2944

Advisory evidence only. This check never authorizes implementation or merge.

State: needs-evidence. Candidate issue links are metadata, not proof the implementation matches scope. Fresh human confirmation remains required.

• Issue #2821: needs-evidence. Link an explicit human scope comment; labels, reviews and informal agreement are not evidence.
• Issue #1394: manual-review. The linked issue is closed; a human must confirm any remaining scope.
• Issue #1310: manual-review. The linked issue is closed; a human must confirm any remaining scope.
• Issue #1354: not-an-issue. A PR reference is not issue traceability.
• Issue #2408: manual-review. The linked issue is closed; a human must confirm any remaining scope.

A current comment scan cannot detect a deleted withdrawal. Confirm current bounded scope,
implementation-to-scope match and review support with a responsible human.
Use CONTRIBUTING.md and the trusted default-branch GOVERNANCE.md roster.
Private security tracking stays private. No labels, milestones or code reviews substitute for scope approval.