Fix: a PreToolUse hook returns "allow" but a deny rule still blocks the tool call in Claude Code
Since Claude Code 2.1.77 a PreToolUse hook's allow cannot override a deny or ask rule. Find the matching rule with /permissions, then move the policy into the hook.