code-sign now supports lifecycle-hook processes, not just spawned child sessions

Claude Code's code-signing helper, which previously identified eligible processes by reading CLAUDE_CODE_REMOTE_SESSION_ID, CLAUDE_CODE_SESSION_ACCESS_TOKEN, and ANTHROPIC_BASE_URL, now also accepts CLAUDE_RUNNER_SESSION_ID and CLAUDE_RUNNER_API_BASE_URL, the environment variables used by lifecycle hooks (scripts that run automatically at points in a session's life). When it finds a CLAUDE_RUNNER_SESSION_ID prefixed with session_, it converts that prefix to cse_ to match the expected format.