pi: prompt before dangerous commands

♠ Previously . Problem statement : my Pi extension blocked dangerous shell commands outright, even when I had already preserved the state they could destroy. The guard parses every bash tool call with tree-sitter, catching commands such as rm -rf , terraform destroy , and destructive Git operations. Today it did exactly what I had asked: % git -C "$(brew --repo thiagowfx/pancake)" reset --hard…