Command blocked in autopilot mode

### Describe the bug

I'm running in autopilot and yolo mode to debug Github CI failures. The agent keeps issuing commands to check on progress bug then blocks them. These command blocks should not be there in autopilot yolo mode.

### Affected version

GitHub Copilot CLI 1.0.11.

### Steps to reproduce the behavior

1. Ask copilot to debug some Github CI/CD fail.
2. Sometimes it issues commands that are blocked.

Example:
```
● Now trigger and monitor with shorter check intervals:

● Trigger iOS CI (shell)
│ cd /Users/cdeil/code/stocadro/stocadro-ai && gh workflow run "Release iOS (TestFlight)" && sleep 5 && gh run list -w "Release iOS (TestFlight)" -L 1
└ 8 lines...

✗ Check job progress after 3 min (shell)
│ cd /Users/cdeil/code/stocadro/stocadro-ai && sleep 180 && gh run view --job=$(gh api repos/stocadro/stocadro-ai/actions/runs/23493270159/jobs --jq '.jobs[0].id') 2>&1 | head -25
└ Command blocked: contains dangerous shell expansion patterns (e.g., parameter transformation, indirect expansion, or nested command substitution) that could enable arbitrary code
execution. Please rewrite the command without these expansion patterns.
```

### Expected behavior

In YOLO and autopilot mode no command should be blocked. Certainly such typical shell expansion patterns shouldn't be blocked.

### Additional context

_No response_

Inizia riproducendo il comando gh workflow mostrato in GitHub Copilot CLI 1.0.11 con autopilot e YOLO abilitati, quindi traccia il controllo di sicurezza dei comandi che segnala pattern pericolosi di espansione della shell. Il lavoro è completato quando i comandi validi non vengono bloccati in queste modalità, mentre i comandi non sicuri rimangono protetti.

Scritto dal modello di indicizzazione a partire dal testo della issue.