Installer consent for agent hooks: disclose rather than re-ask

When an installer can programmatically satisfy another tool's approval gate (e.g. trusting its own Codex hook via the app-server API), there are three designs: leave the tool's manual review (high drop-off), add a yes/no in your installer (clear consent, one more step), or treat running the installer as consent and state it plainly in the output plus a clean uninstall. Keep the 'share automatically vs ask' setting separate: it governs what gets published, not whether the hook runs. Whatever you pick, fall back to the tool's own review hint if the API call fails so nothing breaks.