Terminal auto-approve for agent host

[anthonykim1]

Context:
chat.tools.terminal.enableAutoApprove Probably over-stepping if this leads to enabling all other tool.

We should consider bringing chat.tools.terminal.autoApprove over as well, especially if it's running outside of sandbox. Potentially another step we'd want runtime to go through before they call their built-in shell tool.

This is lot intuitive with our custom terminal tool for AH, but I need to look into how the flow will work with shell tool from CLI SDK.

[anthonykim1]

Seems like there is copilot --allow-tool <pass_in_terminal_commands_here> that folks use when first launching Copilot but will need to see what is available for consumers for SDK.

[anthonykim1]

Plan:

• PR 1: Respect EnableAutoApprove
  In Agent Host Default Approvals, terminal auto-approve can still happen even when chat.tools.terminal.enableAutoApprove=false, as long as the shell request reaches AH’s unsandboxed command-rule path.

• PR 2: Use The Real Terminal AutoApprove Setting
  Goal: replace the hardcoded default-only behavior with the actual VS Code terminal auto-approve configuration.