feat: add config dangerously_functions_filter

[sigoden]

Previous we treats function name that starts with may_ as excute type (dangerously). This method requires modifying function names, which is inflexible.

This PR makes it configurable. In config.yaml, you can now define which functions are considered dangerous and require user confirmation.

dangerously_functions_filter: 'execute_.*'


bots:
  - name: todo-sh
    model: openai:gpt-4o
    dangerously_functions_filter: clear_todos

#587 rename selected_functions to functions_filter