fix: correct managed-hook dedup regex and block unresolvable symlinks

install-codex-hooks.sh: managed_pattern only matched commands ending
with whitespace or end-of-string after the .sh filename, missing
shell-quoted forms produced by shlex.quote when runtime_root contains
spaces. Updated the trailing anchor to also accept quote characters so
duplicate Stop hooks are not inserted on reinstall.

loop-read-validator.sh: the realpath-unavailable fallback used the raw
unresolved path for prefix checks, allowing a symlink outside the
project root pointing to a project file to bypass the methodology
analysis read restriction. Added a symlink check that blocks the read
when the path cannot be canonicalized (fail closed).

Author: SihaoLiu

hooks/loop-read-validator.sh

@@ -104,6 +104,15 @@ if [[ -n "$_MA_CHECK_DIR" ]]; then
 Path contains traversal segments that cannot be resolved without realpath." >&2
                 exit 2
             fi
+            # Fail closed if the file is a symlink we cannot resolve; the raw
+            # path would skip the project-root prefix guard, allowing a symlink
+            # outside the project to point back at restricted project content.
+            if [[ -L "$FILE_PATH" ]]; then
+                echo "# Read Blocked During Methodology Analysis
+
+Path is a symlink that cannot be resolved without realpath." >&2
+                exit 2
+            fi
             if [[ "$FILE_PATH" == /* ]]; then
                 _ma_real_path="$FILE_PATH"
             else

scripts/install-codex-hooks.sh

@@ -135,7 +135,7 @@ if stop_groups is None:
 if not isinstance(stop_groups, list):
     raise SystemExit(f"existing hooks config has invalid Stop array: {hooks_file}")
 
-managed_pattern = re.compile(r"(^|/)hooks/(loop-codex-stop-hook\.sh|pr-loop-stop-hook\.sh)(\s|$)")
+managed_pattern = re.compile(r"(^|/)hooks/(loop-codex-stop-hook\.sh|pr-loop-stop-hook\.sh)(['\"\s]|$)")
 
 filtered_groups = []
 for group in stop_groups: