Drive all 4 remaining tasks to completion through full lifecycle

- actionable-phase-guidance: lifecycle artifacts + .state->complete
- harden-enforcement-layers: pre-push hook, install-hooks.sh, register-guards.sh, prompt pre-edit checks, harness contract update, install/update/upgrade script integration
- plug-stale-task-hole: lifecycle artifacts + .state->complete
- port-pi-guard: pi dev guard plugin, package.json, register-guards integration

All tasks passed bug_find, adversarial_bug_find, doc_review, and referee phases with PASS verdict.

scripts/install.sh

@@ -62,7 +62,11 @@ echo "Installation complete."
 echo ""
 echo "Next steps:"
 echo "  1. cd into a project and run the onboarding prompt"
-echo "  2. In each project that uses git, install the pre-commit hook:"
-echo "     ln -sf ~/.automaton/scripts/git-hooks/pre-commit .git/hooks/pre-commit"
+echo "  2. In each project that uses git, install the automaton hooks:"
+echo "     bash ~/.automaton/scripts/install-hooks.sh /path/to/project"
 echo ""
-echo "This hook blocks commits when no task is in an edit-allowed phase."
+echo "These hooks block commits and pushes when no task is in an edit-allowed phase."
+echo ""
+
+# Register pre-edit guards for detected harnesses
+bash "$FRAMEWORK_DIR/scripts/register-guards.sh"