feat(hooks): support interactive hook scripts

[PhilipNelson5]

Description

When a pre/post bump hook needs user input it fails because stdin, stdout, and stderr are redirected. This feature adds a new cmd utility to run a command without capturing/redirecting input or output to the subprocess. This allows interactive hooks to request input and display output to the user interactively.

Checklist

• I have read the contributing guidelines

Was generative AI tooling used to co-author this PR?

• Yes (please specify the tool below)

Code Changes

• Add test cases to all the changes you introduce
• Run uv run poe all locally to ensure this change passes linter check and tests
• Manually test the changes:
  • Verify the feature/bug fix works as expected in real-world scenarios
  • Test edge cases and error conditions
  • Ensure backward compatibility is maintained
  • Document any manual testing steps performed
• Update the documentation for the changes

Documentation Changes

• Run uv run poe doc locally to ensure the documentation pages renders correctly
• Check and fix any broken links (internal or external)

Expected Behavior

When a pre/post bump hook tries to get user input, it successfully does so.

Steps to Test This Pull Request

1. configure a pre/post bump hook which prompts the user for input.
2. run cz bump.
3. the hook successfully requests user input and is able to capture it without issue.

Additional Context

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.99%. Comparing base (69884e0) to head (d483e68).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #1925   +/-   ##
=======================================
  Coverage   97.99%   97.99%           
=======================================
  Files          60       60           
  Lines        2691     2691           
=======================================
  Hits         2637     2637           
  Misses         54       54           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[bearomorphism]

Then how should we test the cmd.run? Is the test for that removed?

[PhilipNelson5]

I'm not aware of the project history. I don't know if it was ever tested.

[bearomorphism]

I see. I just misunderstood what the test test_run does here.

[bearomorphism]

Please fix the coverage pipeline, thanks

[PhilipNelson5]

@bearomorphism I added tests for cmd.run and cmd.run_interactive.

[bearomorphism]

Thank you for fixing the pipeline failures! @PhilipNelson5

@woile please review this feature

[woile]

According to #1918 using shell=True is a security issue if True, should we remove it?

[PhilipNelson5]

Just removing shell=True causes 100 failed tests and 296 errors. It's probably outside the scope of this PR to fix that.