add --allow-all-readonly flag.

### Describe the feature or problem you'd like to solve

This will behave same as --allow-all but only for read operations, read files, urls, dbs, mails, etc. dont create any resource, dont change anything.

### Proposed solution

_No response_

### Example prompts or workflows

_No response_

### Additional context

_No response_