33f121b113
- P1: When allowedEnvVars is provided, PATH was missing from the base restricted env, causing non-builtin commands to fail at exec time - P2: Allowlisted HOME/CLAUDE_PROJECT_DIR could overwrite normalized values from getHomeDirectory()/cwd with ambient process.env values - P2: Test suite mutated shared pluginHooksState singleton without resetting it in afterEach, causing cross-test state leaks