WEB-4656: add Antigravity 2.0 hooks setup (Subscription mode)

antigravity/hooks/README.md

@@ -0,0 +1,21 @@
+# Antigravity Hooks for Unbound Gateway
+
+Run the command to set up Antigravity hooks with Unbound:
+
+```bash
+python3 <(curl -fsSL https://raw.githubusercontent.com/websentry-ai/setup/refs/heads/main/antigravity/hooks/setup.py) --domain gateway.getunbound.ai
+```
+
+Optional overrides for tenant deployments: `--backend-url <url>`, `--gateway-url <url>` (defaults: `https://backend.getunbound.ai`, `https://api.getunbound.ai`).
+
+If you already have an API key:
+
+```bash
+python3 <(curl -fsSL https://raw.githubusercontent.com/websentry-ai/setup/refs/heads/main/antigravity/hooks/setup.py) --api-key <your-key>
+```
+
+Uninstall:
+
+```bash
+python3 <(curl -fsSL https://raw.githubusercontent.com/websentry-ai/setup/refs/heads/main/antigravity/hooks/setup.py) --clear
+```

antigravity/hooks/mdm/README.md

@@ -0,0 +1,17 @@
+# Antigravity Hooks - MDM Setup
+
+Device-wide installation of Unbound hooks for Antigravity. Requires root.
+
+```bash
+sudo python3 setup.py --api-key <mdm-admin-api-key>
+```
+
+Optional flags: `--backend-url <url>`, `--gateway-url <url>`, `--app_name <name>`.
+
+Uninstall:
+
+```bash
+sudo python3 setup.py --clear
+```
+
+The MDM installer enumerates every user on the device, fetches a per-device API key from the Unbound backend, drops privileges to each user, and writes `~/.gemini/config/hooks.json` plus `~/.unbound/antigravity-hooks/unbound_*.py` for that user. A marker is dropped at `/etc/unbound/antigravity.policy.json` (or `%ProgramFiles%\Unbound\antigravity.policy.json` on Windows) so reruns are idempotent.