fix(permission): honor full access for Bash commands

[wsp1911]

Summary

• Fix Bash tools falling back to confirmation when the global permission mode is Full access.
• Preserve exact-command matching for custom Bash allow rules.
• Add a regression test for the Full access Bash baseline.

Fixes #

Type and Areas

Type:

Regression fix

Areas:

Rust core

Motivation / Impact

Full access resolves to a */* -> Allow baseline, but the Bash-specific matcher previously ignored that rule and fell back to Ask. Bash commands now honor Full access while custom wildcard Bash allow rules remain non-authorizing for compound commands.

Verification

• cargo check -p bitfun-core --features product-full
• cargo test -p bitfun-core --features product-full --lib full_access_baseline_allows_bash_commands
• Verified in the desktop development build: Full access resolved Bash, edit, read, and external-directory actions as Allow without a permission prompt.

Reviewer Notes

• No migration or user-facing string changes.
• The special case only recognizes the global */* -> Allow baseline; custom Bash Allow rules still require an exact command match.

Checklist

• This PR is focused and does not include secrets, temporary prompts, generated scratch files, or unrelated artifacts.
• Relevant verification is recorded above, or skipped checks are explained.
• User-facing strings, docs, and locales are updated where applicable.