feat(crewai): add native GovernanceHooks using CrewAI execution hooks (microsoft#1588)

Replace fragile proxy-based monkey-patching with CrewAI's native
execution hooks (@before_tool_call, @after_tool_call, @before_llm_call,
@after_llm_call) introduced in CrewAI 0.80+.

Changes:
- Add GovernanceHooks class that registers four global governance hooks
  for tool allowlist, blocked-pattern scanning, Cedar/OPA pre_execute
  gates, and output content filtering
- Add CrewAIKernel.as_hooks() factory method as the recommended
  integration path
- Deprecate CrewAIKernel.wrap() with DeprecationWarning pointing to
  as_hooks()
- Export CrewAIGovernanceHooks from integrations package
- Add 43 new tests covering all four hook types, deprecation warnings,
  Cedar evaluator integration, and backward compatibility
- All 12 existing CrewAI regression tests pass unchanged

Resolves microsoft#1576

Co-authored-by: Nishar <you@example.com>

Author: 2 people

agent-governance-python/agent-os/src/agent_os/integrations/__init__.py

@@ -62,6 +62,10 @@
 from agent_os.integrations.anthropic_adapter import AnthropicKernel, GovernedAnthropicClient
 from agent_os.integrations.autogen_adapter import AutoGenKernel
 from agent_os.integrations.crewai_adapter import CrewAIKernel
+try:
+    from agent_os.integrations.crewai_adapter import GovernanceHooks as CrewAIGovernanceHooks
+except ImportError:
+    pass
 from agent_os.integrations.gemini_adapter import GeminiKernel, GovernedGeminiModel
 from agent_os.integrations.google_adk_adapter import (
     ADKExecutionContext,