Your Claude Code hooks can block `cat .env` and still leak your secrets. Here's exactly why — and the four-layer stack that actually bounds blast radius.