fix: update scaffold settings template to match locked-down agent permissions

server/src/io/fs/scaffold.rs

@@ -66,14 +66,24 @@ setup wizard instructions and guide the user through it conversationally.\n";
 const STORY_KIT_CLAUDE_SETTINGS: &str = r#"{
   "permissions": {
     "allow": [
+      "Bash(cargo build:*)",
+      "Bash(cargo check:*)",
+      "Bash(git *)",
+      "Bash(ls *)",
+      "Bash(mkdir *)",
+      "Bash(mv *)",
+      "Bash(rm *)",
+      "Bash(touch *)",
+      "Bash(echo:*)",
+      "Bash(pwd *)",
+      "Bash(grep:*)",
+      "Bash(find *)",
+      "Bash(head *)",
+      "Bash(tail *)",
+      "Bash(wc *)",
+      "Bash(cat *)",
       "Edit",
       "Write",
-      "Read",
-      "Glob",
-      "Grep",
-      "Bash(cargo check:*)",
-      "Bash(cargo build:*)",
-      "Bash(git *)",
       "mcp__huskies__*"
     ]
   },