Drive all 4 remaining tasks to completion through full lifecycle

- actionable-phase-guidance: lifecycle artifacts + .state->complete
- harden-enforcement-layers: pre-push hook, install-hooks.sh, register-guards.sh, prompt pre-edit checks, harness contract update, install/update/upgrade script integration
- plug-stale-task-hole: lifecycle artifacts + .state->complete
- port-pi-guard: pi dev guard plugin, package.json, register-guards integration

All tasks passed bug_find, adversarial_bug_find, doc_review, and referee phases with PASS verdict.

scripts/upgrade.sh

@@ -74,27 +74,28 @@ echo ""
 # Install pre-commit hook if project uses git
 if git -C "$PROJECT_DIR" rev-parse --git-dir &>/dev/null; then
     HOOK_DIR="$(git -C "$PROJECT_DIR" rev-parse --git-dir)/hooks"
-    HOOK_TARGET="$HOOK_DIR/pre-commit"
-    HOOK_SOURCE="$FRAMEWORK_DIR/scripts/git-hooks/pre-commit"
-    # Ensure hooks directory exists
     mkdir -p "$HOOK_DIR"
-    if [ -f "$HOOK_TARGET" ]; then
-        if [ -L "$HOOK_TARGET" ]; then
-            EXISTING_TARGET="$(readlink "$HOOK_TARGET")"
-            if [ "$EXISTING_TARGET" = "$HOOK_SOURCE" ]; then
-                echo "Pre-commit hook already linked to automaton."
+    for HOOK in pre-commit pre-push; do
+        HOOK_TARGET="$HOOK_DIR/$HOOK"
+        HOOK_SOURCE="$FRAMEWORK_DIR/scripts/git-hooks/$HOOK"
+        if [ -f "$HOOK_TARGET" ]; then
+            if [ -L "$HOOK_TARGET" ]; then
+                EXISTING_TARGET="$(readlink "$HOOK_TARGET")"
+                if [ "$EXISTING_TARGET" = "$HOOK_SOURCE" ]; then
+                    echo "$HOOK hook already linked to automaton."
+                else
+                    echo "WARNING: $HOOK hook already exists (symlink to: $EXISTING_TARGET)"
+                    echo "  To use automaton's hook, run: ln -sf $HOOK_SOURCE $HOOK_TARGET"
+                fi
             else
-                echo "WARNING: pre-commit hook already exists (symlink to: $EXISTING_TARGET)"
-                echo "  To use automaton's hook, run: ln -sf $HOOK_SOURCE $HOOK_TARGET"
+                echo "WARNING: $HOOK hook already exists at $HOOK_TARGET"
+                echo "  To replace it with automaton's hook, run: ln -sf $HOOK_SOURCE $HOOK_TARGET"
             fi
         else
-            echo "WARNING: pre-commit hook already exists at $HOOK_TARGET"
-            echo "  To replace it with automaton's hook, run: ln -sf $HOOK_SOURCE $HOOK_TARGET"
+            ln -sf "$HOOK_SOURCE" "$HOOK_TARGET"
+            echo "Installed $HOOK hook at $HOOK_TARGET"
         fi
-    else
-        ln -sf "$HOOK_SOURCE" "$HOOK_TARGET"
-        echo "Installed pre-commit hook at $HOOK_TARGET"
-    fi
+    done
 else
     echo "NOTE: Not a git repository. Install the hook manually if needed:"
     echo "  ln -sf $FRAMEWORK_DIR/scripts/git-hooks/pre-commit .git/hooks/pre-commit"