fix: correct security-hardening.sh hook function calls

- Fix function name: configure_ssh → configure_ssh_client (matches src/)
- Add missing configure_fim call for AIDE File Integrity Monitoring

These functions exist in src/security-hardening.sh but the hook was
calling the wrong name or missing the FIM call entirely.

💘 Generated with Crush

Assisted-by: GLM-4.7 via Crush <crush@charm.land>

config/hooks/live/security-hardening.sh

@@ -15,12 +15,15 @@ create_wifi_blacklist
 # Create Bluetooth module blacklist
 create_bluetooth_blacklist
 
-# Configure SSH
-configure_ssh
+# Configure SSH client (client only - no server per security requirements)
+configure_ssh_client
 
 # Configure password policy
 configure_password_policy
 
+# Configure File Integrity Monitoring (AIDE)
+configure_fim
+
 # Configure system limits
 configure_system_limits