Approval for commands is not fine grained enough (subcommand permission)

### Describe the bug

Like other coding agents, copilot asks if it is allowed to run commands. However, for commands like `uv` or `cargo` that can do many things, it only asks permission for the _top level command_ and not for the actual _subcommand_ that it wants to run.

This is problematic because `uv run` can run anything including destructive scripts or `carg some-plugin` can make unintended changes.

This is a request to allow for more fine grained permissions where I can approve what Copilot _actually_ intends to execute.

### Affected version

_No response_

### Steps to reproduce the behavior

_No response_

### Expected behavior

_No response_

### Additional context

_No response_