security: close hooks RCE left open by config-trust rollout (P0 RCE)

ober

b7a0c2ce778ed310a08961805e8b12c51e89272d

diff --git a/src/jcode/core/hooks.ss b/src/jcode/core/hooks.ss
index 552cd41..6f78033 100644
--- a/src/jcode/core/hooks.ss
+++ b/src/jcode/core/hooks.ss
@@ -51,7 +51,7 @@
   ;; be able to define a hook that executes at the first lifecycle event
   ;; (silent RCE). Only the trusted global config (or an explicit opt-in)
   ;; may supply hooks.
-  (let ((block (config-ref "hooks")))
+  (let ((block (config-secure-ref "hooks")))
     (cond
       ((not (and block (hash-table? block))) '())
       (else