Control the permissions for drvfs to mount host hard drives

**Is your feature request related to a problem? Please describe.**
Fact 1 (Requirement): As we all know, AI Agents may damage the host system, and using WSL can provide a trustworthy sandbox environment to a certain extent.
Fact 2 (Current Issue): However, drvfs can mount the host system's disk without requiring any permission from the host.
Viewpoint 1 (Counter-argument): Some might argue that root permissions solve this problem to some degree.
Viewpoint 2 (Rebuttal to Viewpoint 1): But in reality, it is common practice to grant AI temporary root privileges.
Viewpoint 3 (Rebuttal to Viewpoint 1): Furthermore, operations on the host file system should inherently require confirmation from the host.

**Describe the solution you'd like**
There must be some way to impose restrictions,
such as setting a password in the global configuration file.

**Describe alternatives you've considered**
Or pop up a UAC window, save the password in the Windows Credential Locker, etc.

The issue identifies drvfs host-drive mounting and suggests a global configuration, UAC prompt, or Windows Credential Locker. Start by locating the drvfs mounting entry point and related configuration handling, then determine which restriction approach is supported. Done requires an agreed host-confirmation mechanism, but no files, tests, or precise acceptance criteria are provided.

Written by the indexing model from the issue text.