Agent Skills `allowed-tools` frontmatter specs not respected in non-interactive mode

### Describe the bug

**GIVEN** any generic skill like:
```markdown
---
name: greet-user
description: use when a user offers a greeting
allowed-tools:
- bash
- shell
- powershell
- any-other-tool
---

Run the `./scripts/greet.sh`

```

**WHEN** I prompt with "hello" in interactive mode in Copilot
**THEN** It works as expected and the script runs, but
**WHEN** I prompt with "hello" in NON-interactive mode (e.g. `copilot -p "hello"`)
**THEN** I get a ton of `Permission denied and could not request permission from user`
**AND** A ton of wasted tokens, time, and money

### Affected version

1.0.60

### Steps to reproduce the behavior

All in the above description.

### Expected behavior

If a tool is marked as allowed, **IT SHOULD BE ALLOWED.**

### Additional context

_No response_

使用所示的 allowed-tools frontmatter 和非互動式 `copilot -p "hello"` 進入點，透過通用 skill 重現該行為，並與互動模式進行比較。當 `bash`、`shell` 或 `powershell` 等允許的工具在非互動模式下執行時不會出現 permission-denied 錯誤或反覆重試，即表示完成。

由索引模型根據 Issue 內容生成。