fix(shell): preserve legacy bash compatibility

Keep mixed shell/bash permission configs ordered correctly and treat --tools bash as the legacy alias during agent creation.