Tool whitelist for interactive mode (permissions)

### Feature summary

Tool whitelist for interactive mode on a global level (not only per session or repo)

### What problem are you trying to solve?

Currently Interactive mode requires manual approval for every tool call, including safe read-only operations (grep, cat, find, git log, git status, etc.). The only alternative is /allow-all which also approves destructive operations.

This feature request was also opened in the copilot-cli repo: https://github.com/github/copilot-cli/issues/1973

### Proposed solution

A user-scoped / global `permissions-config.json` instead of on a per-repo basis (https://github.com/github/copilot-cli/issues/1973#issuecomment-4335076889), could both be a solution for the copilot CLI and for the Copilot App too. Nice to have: from the settings menu you could edit these easily.

Workaround for github CLI at this time is a command line alias that includes the right allow flags (https://github.com/github/copilot-cli/issues/1973#issuecomment-4040243845). Modifuing the command line arguments in the copilot app is not supported so this is even a bigger problem here.

### Workflow impact

This would reduce the amount of times copilot asks for manual approval drastically, while still following principle of least privilege (that's why I don't use /allow-all-tools or auto mode)

### Installation context

_No response_

### Additional context

_No response_

首先跟踪 Copilot App 中交互模式的批准行为和现有的 /allow-all 路径。然后检查用户设置和每个存储库的权限是如何表示的。当一个用户范围的权限配置能够全局允许选定的安全工具，同时保留对未列出或具有破坏性的操作的批准要求时，即表示完成。

由索引模型根据 Issue 内容生成。