Oh, this solved it for me! I didn’t even have to restart anything; apparently systemd picks up the new hook at next suspend: