fix: wrap hooks.json under top-level "hooks" key

Plugin system expects { "hooks": { "PostToolUse": [...] } } but both
java-core and java-security had PostToolUse at the top level, causing
"Invalid input: expected record, received undefined" on plugin load.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: ducpm2303

plugins/java-core/hooks/hooks.json

@@ -1,31 +1,33 @@
 {
-  "PostToolUse": [
-    {
-      "matcher": "Write|Edit",
-      "hooks": [
-        {
-          "type": "command",
-          "command": "echo '[java-core] Java file edited. Reminder: run mvn compile -q or ./gradlew build -q to verify the build still passes.'"
-        }
-      ]
-    },
-    {
-      "matcher": "Write|Edit",
-      "hooks": [
-        {
-          "type": "command",
-          "command": "echo '[java-core] Did you add or update tests for this change? Check for a corresponding *Test.java file.'"
-        }
-      ]
-    },
-    {
-      "matcher": "Bash",
-      "hooks": [
-        {
-          "type": "command",
-          "command": "echo '[java-core] After committing, consider running mvn verify or ./gradlew check for a full quality gate.'"
-        }
-      ]
-    }
-  ]
+  "hooks": {
+    "PostToolUse": [
+      {
+        "matcher": "Write|Edit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "echo '[java-core] Java file edited. Reminder: run mvn compile -q or ./gradlew build -q to verify the build still passes.'"
+          }
+        ]
+      },
+      {
+        "matcher": "Write|Edit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "echo '[java-core] Did you add or update tests for this change? Check for a corresponding *Test.java file.'"
+          }
+        ]
+      },
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "echo '[java-core] After committing, consider running mvn verify or ./gradlew check for a full quality gate.'"
+          }
+        ]
+      }
+    ]
+  }
 }

plugins/java-security/hooks/hooks.json

@@ -1,13 +1,15 @@
 {
-  "PostToolUse": [
-    {
-      "matcher": "Write|Edit",
-      "hooks": [
-        {
-          "type": "command",
-          "command": "echo '[java-security] Java file modified. Consider asking the java-security-reviewer agent to check for OWASP vulnerabilities, injection risks, or secrets in the new code.'"
-        }
-      ]
-    }
-  ]
+  "hooks": {
+    "PostToolUse": [
+      {
+        "matcher": "Write|Edit",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "echo '[java-security] Java file modified. Consider asking the java-security-reviewer agent to check for OWASP vulnerabilities, injection risks, or secrets in the new code.'"
+          }
+        ]
+      }
+    ]
+  }
 }