fix: invoke .sh hooks via bash prefix; add version for cache invalidation

Fixes #993 (Permission denied on hook scripts) without relying on
client-side +x preservation.

The hook executor spawns commands via /bin/sh -c, which requires +x
to execute a script directly. Prefixing with bash reads the script
as data — mode bits are irrelevant. This works on all Claude Code
versions, whereas the client-side chmod fix (claude-cli #24666) only
shipped in v2.1.86.

All 3 scripts declare #!/bin/bash and use bashisms ([[ ]], =~), so
bash (not sh) is the correct interpreter.

The version field forces a fresh cache path (1.0.0/ instead of
unknown/), ensuring the new hooks.json reaches users with stale
caches.

.claude-plugin/marketplace.json

@@ -464,7 +464,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/tryflint/claude-code-plugin.git",
-        "sha": "8f57ef474f59817c7e5930dd6c295232d43c3711"
+        "sha": "f3d56e33ed2fb3ed9b4f02e0fc65d0a79b24bf4d"
       },
       "homepage": "https://www.tryflint.com/docs/claude-code-plugin"
     },

external_plugins/terraform/.claude-plugin/plugin.json

@@ -0,0 +1,7 @@
+{
+  "name": "terraform",
+  "description": "The Terraform MCP Server provides seamless integration with Terraform ecosystem, enabling advanced automation and interaction capabilities for Infrastructure as Code (IaC) development.",
+  "author": {
+    "name": "HashiCorp"
+  }
+}

external_plugins/terraform/.mcp.json

@@ -0,0 +1,12 @@
+{
+  "terraform": {
+    "command": "docker",
+    "args": [
+      "run",
+      "-i",
+      "--rm",
+      "-e", "TFE_TOKEN=${TFE_TOKEN}",
+      "hashicorp/terraform-mcp-server:0.4.0"
+    ]
+  }
+}

plugins/explanatory-output-style/.claude-plugin/plugin.json

@@ -1,5 +1,6 @@
 {
   "name": "explanatory-output-style",
+  "version": "1.0.0",
   "description": "Adds educational insights about implementation choices and codebase patterns (mimics the deprecated Explanatory output style)",
   "author": {
     "name": "Anthropic",

plugins/explanatory-output-style/hooks/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/hooks-handlers/session-start.sh"
+            "command": "bash \"${CLAUDE_PLUGIN_ROOT}/hooks-handlers/session-start.sh\""
           }
         ]
       }

plugins/learning-output-style/.claude-plugin/plugin.json

@@ -1,5 +1,6 @@
 {
   "name": "learning-output-style",
+  "version": "1.0.0",
   "description": "Interactive learning mode that requests meaningful code contributions at decision points (mimics the unshipped Learning output style)",
   "author": {
     "name": "Anthropic",

plugins/learning-output-style/hooks/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/hooks-handlers/session-start.sh"
+            "command": "bash \"${CLAUDE_PLUGIN_ROOT}/hooks-handlers/session-start.sh\""
           }
         ]
       }

plugins/ralph-loop/.claude-plugin/plugin.json

@@ -1,5 +1,6 @@
 {
   "name": "ralph-loop",
+  "version": "1.0.0",
   "description": "Continuous self-referential AI loops for interactive iterative development, implementing the Ralph Wiggum technique. Run Claude in a while-true loop with the same prompt until task completion.",
   "author": {
     "name": "Anthropic",

plugins/ralph-loop/hooks/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "${CLAUDE_PLUGIN_ROOT}/hooks/stop-hook.sh"
+            "command": "bash \"${CLAUDE_PLUGIN_ROOT}/hooks/stop-hook.sh\""
           }
         ]
       }