feat: add command-aware permission request system for granular tool approval