add checkpoint_policy_blocked telemetry event

New event records when a hook is prevented from creating checkpoint data by a checkpoint policy. Pure payload builder mirrors BuildEventPayload; TrackCheckpointPolicyBlocked spawns the existing detached subprocess and honors ENTIRE_TELEMETRY_OPTOUT. The settings.Telemetry opt-in check stays on the CLI side.