dsh-coding-tools v0.1.4

Operator-configurable approval prompts for edit_ranges and AST/LSP process startup. Prompts remain enabled by default; disabling them preserves exact-version observations, guarded atomic writes, sandbox policy, bounded execution, and mandatory read-only process confinement. Adds Settings UI controls and focused security regression coverage. SHA-256: 7aa616bf63cb1e46cd1f230fdec49e0087c2586dbb12d96e7a0ffb45c95e8bfb