emit policy-blocked telemetry from agent hooks

Agent session-start skips and turn-end/subagent-end/post-todo rejections caused by an unsupported or unreadable checkpoint policy now report a checkpoint_policy_blocked event, distinguishing skipped (session-start) from blocked (write hooks) outcomes.