Agent Skills `allowed-tools` frontmatter specs not respected in non-interactive mode

### Describe the bug

**GIVEN** any generic skill like:
```markdown
---
name: greet-user
description: use when a user offers a greeting
allowed-tools:
- bash
- shell
- powershell
- any-other-tool
---

Run the `./scripts/greet.sh`

```

**WHEN** I prompt with "hello" in interactive mode in Copilot
**THEN** It works as expected and the script runs, but
**WHEN** I prompt with "hello" in NON-interactive mode (e.g. `copilot -p "hello"`)
**THEN** I get a ton of `Permission denied and could not request permission from user`
**AND** A ton of wasted tokens, time, and money

### Affected version

1.0.60

### Steps to reproduce the behavior

All in the above description.

### Expected behavior

If a tool is marked as allowed, **IT SHOULD BE ALLOWED.**

### Additional context

_No response_

使用所示的 allowed-tools frontmatter 和非交互式 `copilot -p "hello"` 入口点，通过通用 skill 重现该行为，并将其与交互模式进行比较。当 `bash`、`shell` 或 `powershell` 等允许的工具在非交互模式下运行时不会出现 permission-denied 错误或反复重试，即表示完成。

由索引模型根据 Issue 内容生成。