Function ci_hook_content 

pub fn ci_hook_content() -> String

CI hook config for Copilot cloud agent + repo-scoped Copilot CLI.

The cloud agent sandbox has no sqz preinstalled and restricts outbound network to GitHub hosts — which is exactly where sqz’s install script and release binaries live, so a sessionStart hook can bootstrap it. The preToolUse hook is fail-closed on non-zero exit in Copilot, so every path ends in exit 0 with either a decision or {} (fall through) — a missing binary must never block the tool call.