StatusLine and FileSuggestion hook commands now verify workspace trust before executing. If the workspace trust dialog hasn't been accepted, these hooks are skipped with a warning, preventing untrusted workspaces from running arbitrary hook commands.
Evidence
"Skipping StatusLine command execution - workspace trust not accepted" and "Skipping FileSuggestion command execution - workspace trust not accepted" (search for "workspace trust not accepted")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
