Permission deny patterns dont match PowerShell commands when shell is pwsh

Summary

When shell is pwsh, bash permission deny patterns (rm *, del *, sudo *, scp *) never match PowerShell commands (Remove-Item, etc). Deny rules are silently bypassed.

Evidence

• Config: "shell": "pwsh" with "rm *": "deny" and "del *": "deny"
• Logs show Remove-Item executed 9 times - zero matched by deny rules
• All bash-style deny rules are irrelevant on Windows pwsh

Expected

Permission matching should be shell-aware. "rm ": "deny" should match Remove-Item when shell is pwsh. Or provide separate pwsh permission block.

Impact

False sense of security - deny list looks complete but does nothing on Windows.

Version: 1.18.16, Electron 42.3.3, Windows 10