feat: Add live-build hooks

- Add security-hardening.sh for system hardening
- Add firewall-setup.sh for nftables configuration
- Add qr-code-import.sh for WireGuard QR scanning
- Add disable-package-management.sh to secure package tools
- Add install-scripts.sh to install source utilities

These hooks implement core security and functionality requirements.

💘 Generated with Crush

Assisted-by: GLM-4.6 via Crush <crush@charm.land>

config/hooks/live/firewall-setup.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+# Dynamic firewall setup hook
+set -euo pipefail
+
+# Install firewall setup script
+install -m 755 /usr/local/bin/firewall-setup.sh
+
+# Enable nftables service
+systemctl enable nftables
+
+echo "Firewall setup hook completed."