Command blocked in autopilot mode

### Describe the bug

I'm running in autopilot and yolo mode to debug Github CI failures. The agent keeps issuing commands to check on progress bug then blocks them. These command blocks should not be there in autopilot yolo mode.

### Affected version

GitHub Copilot CLI 1.0.11.

### Steps to reproduce the behavior

1. Ask copilot to debug some Github CI/CD fail.
2. Sometimes it issues commands that are blocked.

Example:
```
● Now trigger and monitor with shorter check intervals:

● Trigger iOS CI (shell)
│ cd /Users/cdeil/code/stocadro/stocadro-ai && gh workflow run "Release iOS (TestFlight)" && sleep 5 && gh run list -w "Release iOS (TestFlight)" -L 1
└ 8 lines...

✗ Check job progress after 3 min (shell)
│ cd /Users/cdeil/code/stocadro/stocadro-ai && sleep 180 && gh run view --job=$(gh api repos/stocadro/stocadro-ai/actions/runs/23493270159/jobs --jq '.jobs[0].id') 2>&1 | head -25
└ Command blocked: contains dangerous shell expansion patterns (e.g., parameter transformation, indirect expansion, or nested command substitution) that could enable arbitrary code
execution. Please rewrite the command without these expansion patterns.
```

### Expected behavior

In YOLO and autopilot mode no command should be blocked. Certainly such typical shell expansion patterns shouldn't be blocked.

### Additional context

_No response_

Start by reproducing the shown gh workflow command in GitHub Copilot CLI 1.0.11 with autopilot and YOLO enabled, then trace the command-safety check that reports dangerous shell expansion patterns. Done means valid commands are not blocked in those modes while unsafe commands remain protected.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.