fix: remove cargo test/clippy/npm from agent Bash permissions

Agents were running cargo test directly via Bash instead of using the
run_tests MCP tool, causing 4 concurrent cargo builds that deadlocked
on the build directory lock. Removed cargo test, cargo clippy, cargo
nextest, script/test, npm test, and pnpm test from the allowed Bash
commands. Agents must use the run_tests MCP tool which returns truncated
output and prevents concurrent builds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/src/io/fs/scaffold.rs

@@ -66,34 +66,14 @@ setup wizard instructions and guide the user through it conversationally.\n";
 const STORY_KIT_CLAUDE_SETTINGS: &str = r#"{
   "permissions": {
     "allow": [
-      "Bash(cargo build:*)",
-      "Bash(cargo check:*)",
-      "Bash(cargo clippy:*)",
-      "Bash(cargo test:*)",
-      "Bash(cargo run:*)",
-      "Bash(cargo nextest run:*)",
-      "Bash(git *)",
-      "Bash(ls *)",
-      "Bash(mkdir *)",
-      "Bash(mv *)",
-      "Bash(rm *)",
-      "Bash(touch *)",
-      "Bash(echo:*)",
-      "Bash(pwd *)",
-      "Bash(pnpm install:*)",
-      "Bash(pnpm run build:*)",
-      "Bash(pnpm run test:*)",
-      "Bash(pnpm test:*)",
-      "Bash(pnpm build:*)",
-      "Bash(npm run build:*)",
-      "Bash(npx tsc:*)",
-      "Bash(npx vitest:*)",
-      "Bash(npx @biomejs/biome check:*)",
-      "Bash(npx playwright test:*)",
-      "Bash(script/test:*)",
-      "Bash(./script/test:*)",
       "Edit",
       "Write",
+      "Read",
+      "Glob",
+      "Grep",
+      "Bash(cargo check:*)",
+      "Bash(cargo build:*)",
+      "Bash(git *)",
       "mcp__huskies__*"
     ]
   },