#policy

Never-ask mode for the coding agent, and the real checkout still says no

A handful of permission modes went into the coding agent, and every tool now routes through one resolver that checks where a request points before it checks the mode, so secrets and my real checkout stay off limits no matter how permissive the setting.