@picasso/auto-approve

dsh cordis plugin: auto-approves tool executions against an allowlist of tool names — config/env at boot plus a sidecar-persisted autoApprove remote (list/add/remove/clear) that edits policy live (approval/request seam, audited; tools/pre-execute rescue when no approval service is mounted).