fix: moves COPILOT_HOOKS_DENY_DEMO guard to ensure deny() in scope

[ohainle]

Why:

Closes: #43102

What's being changed (if available, include any code snippets, screenshots, or gifs):

This PR addresses the script failures discussed in #43102, amending the pre-tool-policy.sh bash example script listed at https://docs.github.com/en/copilot/tutorials/copilot-cli-hooks#example-script-bash.
By moving the COPILOT_HOOKS_DENY_DEMO guard to below the deny() declaration, we ensure that deny() is always in scope when invoked.

Note

This PR only addresses the bash examples, as I don't currently have access to a PowerShell environment to reproduce and confirm the issue on that end.

I'm happy for this PR to be hijacked and updated with PowerShell fixes, if convenient.
Otherwise, the issue should remain open until PowerShell examples have been investigated, and if necessary amended.

Check off the following:

• A subject matter expert (SME) has reviewed the technical accuracy of the content in this PR. In most cases, the author can be the SME. Open source contributions may require an SME review from GitHub staff.
• The changes in this PR meet the docs fundamentals that are required for all content.
• All CI checks are passing and the changes look good in the review environment.

[welcome]

Thanks for opening this pull request! A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

[github-actions]

How to review these changes 👓

Thank you for your contribution. To review these changes, choose one of the following options:

• Spin up a codespace
• Set up a local development environment

A Hubber will need to deploy your changes internally to review.

Table of review links

Note: Please update the URL for your staging server or codespace.

The table shows the files in the content directory that were changed in this pull request. This helps you review your changes on a staging server. Changes to the data directory are not included in this table.

Source	Review	Production	What Changed
copilot/tutorials/copilot-cli-hooks.md	fpt ghec	fpt ghec

Key: fpt: Free, Pro, Team; ghec: GitHub Enterprise Cloud; ghes: GitHub Enterprise Server

🤖 This comment is automatically generated.

[github-actions]

A stale label has been added to this pull request because it has been open 30 days with no activity. If you think this pull request should remain open, please add a new comment.