Add CLI flag option like `--request-tool` to downgrade from allowed to requesting permission

### Describe the feature or problem you'd like to solve

I am interesting in using `--allow-all-tools` but with a downgrade exception like `--request-tool 'shell(rm)'`

### Proposed solution

I would suggest another new CLI flag option like `--request-tool`.

We can currently combine `--allow-all-tools` with `--deny-tool 'shell(rm)'` but that actively prevents the CLI from trying to use `rm` at all. I would still like it to _try_ to use that command, but still want it to ask for my permission on that command specifically.

### Example prompts or workflows

```shell
copilot --allow-all-tools --request-tool 'shell(rm)'
copilot --allow-tool 'write' --allow-tool 'shell' --request-tool 'shell(git push)'
copilot --allow-all-tools --request-tool 'shell(npm install)'
```

### Additional context

_No response_