Add story 35: Agent security and sandboxing, add bypassPermissions to agent spawns

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

server/src/agents.rs

@@ -180,6 +180,10 @@ fn run_agent_pty(
     cmd.arg("stream-json");
     cmd.arg("--verbose");
 
+    // Supervised agents don't need interactive permission prompts
+    cmd.arg("--permission-mode");
+    cmd.arg("bypassPermissions");
+
     // Append role as system prompt context
     cmd.arg("--append-system-prompt");
     cmd.arg(format!(