Drive all 4 remaining tasks to completion through full lifecycle

- actionable-phase-guidance: lifecycle artifacts + .state->complete
- harden-enforcement-layers: pre-push hook, install-hooks.sh, register-guards.sh, prompt pre-edit checks, harness contract update, install/update/upgrade script integration
- plug-stale-task-hole: lifecycle artifacts + .state->complete
- port-pi-guard: pi dev guard plugin, package.json, register-guards integration

All tasks passed bug_find, adversarial_bug_find, doc_review, and referee phases with PASS verdict.

scripts/update.sh

@@ -56,3 +56,19 @@ fi
 
 echo ""
 echo "Update complete."
+
+# Register pre-edit guards for detected harnesses
+bash "$FRAMEWORK_DIR/scripts/register-guards.sh"
+
+# Ensure git hooks are installed in current project
+if git rev-parse --git-dir &>/dev/null 2>&1; then
+    HOOK_DIR="$(git rev-parse --git-dir)/hooks"
+    for hook in pre-commit pre-push; do
+        HOOK_SRC="$HOME/.automaton/scripts/git-hooks/$hook"
+        HOOK_DST="$HOOK_DIR/$hook"
+        if [ -f "$HOOK_SRC" ] && [ ! -f "$HOOK_DST" ]; then
+            ln -sf "$HOOK_SRC" "$HOOK_DST"
+            echo "Installed $hook hook"
+        fi
+    done
+fi