refactor(stack): use as_file() for package resource copying

[jd]

Change git hook installation to use importlib.resources.as_file()
context manager for copying resources. This ensures compatibility
with zip/PEX-style package installations where resources aren't
directly accessible as filesystem paths.

• Rename _get_script_resource_path() to _get_script_resource()
  returning Traversable instead of str
• Add _get_wrapper_resource() helper
• Update _script_needs_update() to accept Traversable
• Use as_file() context manager in _install_git_hook() and
  ensure_hooks_updated()

This makes git hook handling consistent with Claude hook handling
which already uses as_file().

Co-Authored-By: Claude Opus 4.5 noreply@anthropic.com

[jd]

This pull request is part of a stack:

1. refactor(stack): use as_file() for package resource copying (#937) 👈

[mergify]

Merge Protections

Your pull request matches the following merge protections and will not be merged until they are valid.

🟢 🤖 Continuous Integration

Wonderful, this rule succeeded.

• all of:
  • check-success=ci-gate

🟢 👀 Review Requirements

Wonderful, this rule succeeded.

• any of:
  • #approved-reviews-by>=2
  • author = dependabot[bot]
  • author = mergify-ci-bot
  • author = renovate[bot]

🟢 Enforce conventional commit

Wonderful, this rule succeeded.

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

• title ~= ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert)(?:\(.+\))?:

🟢 🔎 Reviews

Wonderful, this rule succeeded.

• #changes-requested-reviews-by = 0
• #review-requested = 0
• #review-threads-unresolved = 0

🟢 📕 PR description

Wonderful, this rule succeeded.

• body ~= (?ms:.{48,})

[mergify]

🧪 CI Insights

Here's what we observed from your CI run for 82b0e00.

🟢 All jobs passed!

But CI Insights is watching 👀

Pull request has been modified.

[mergify]

@jd this pull request is now in conflict 😩

[mergify]

Merge Queue Status

✅ The pull request has been merged at 82b0e00

This pull request spent 8 seconds in the queue, including 1 second running CI.
The checks were run in-place.

Required conditions to merge

• all of [🛡 Merge Protections rule Enforce conventional commit]:
  • title ~= ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert)(?:\(.+\))?:
    • refactor(stack): use as_file() for package resource copying #937
• all of [🛡 Merge Protections rule 👀 Review Requirements]:
  • any of:
    • #approved-reviews-by>=2
      • refactor(stack): use as_file() for package resource copying #937
    • author = dependabot[bot]
      • refactor(stack): use as_file() for package resource copying #937
    • author = mergify-ci-bot
      • refactor(stack): use as_file() for package resource copying #937
    • author = renovate[bot]
      • refactor(stack): use as_file() for package resource copying #937
• all of [🛡 Merge Protections rule 📕 PR description]:
  • body ~= (?ms:.{48,})
    • refactor(stack): use as_file() for package resource copying #937
• all of [🛡 Merge Protections rule 🔎 Reviews]:
  • #changes-requested-reviews-by = 0
    • refactor(stack): use as_file() for package resource copying #937
  • #review-requested = 0
    • refactor(stack): use as_file() for package resource copying #937
  • #review-threads-unresolved = 0
    • refactor(stack): use as_file() for package resource copying #937
• all of [🛡 Merge Protections rule 🤖 Continuous Integration]:
  • all of:
    • check-success=ci-gate