hooks: lock by hooks directory, not by repository

The hooks lock lived in each repository's git common dir, but core.hooksPath can point several repositories at one hooks directory; they took different locks and could interleave installs and removals there. The lock now lives in the per-user cache, named from the resolved hooks directory, so every repository using a directory takes the same one. Temp names and the leftover sweep are safe under it unchanged.