Change default permissions for bash, edit, and webfetch from allow → ask

[GregorLohaus]

This PR changes the defaults for bash, edit, and webfetch tools to ask instead of allow.

Why:

Safety: Prevents accidental shell commands, file edits, or network requests that could be destructive or surprising for new users.

Trust & onboarding: New users expect potentially risky actions to require confirmation. Default-allow can feel unsafe and discourage adoption.

I was personally burned by these defaults when trying out opencode for the first time and qwen 3 coder just edited files with shell commands when it could not use the edit tool because it was in Planning mode.

The gemini-cli defaults to ask which felt much saner when trying it out i don't expect an ai-cli tool to just let an agent run arbitrary shell commands on my system by default.

[David-Else]

Why

    bash: {
        "*": "ask",
      },

rather than

    "bash": "ask",

?

https://opencode.ai/docs/permissions/#bash

I don't understand why this PR is not default, I don't want the agent all over my hard drive by default!

[GregorLohaus]

rebased

[ony]

@GregorLohaus, is it possible to use dedicated branch for this PR to avoid inclusion of ever growing irrelevant changes from dev?
Right now subscribing to this PR not useful since every day there is a notification for STATS.md.

Or maybe disable GitHub actions for fork.