@picasso/lifecycle-hooks

dsh cordis plugin: runs user-configured commands (argv arrays via child_process.execFile, never shell strings) on lifecycle events — onSessionCreate, onTurnStart, onTurnEnd. Executables are validated at mount; hooks run fail-open off the hot path.