Add CLI flag option like `--request-tool` to downgrade from allowed to requesting permission

[JamesMGreene]

Describe the feature or problem you'd like to solve

I am interesting in using --allow-all-tools but with a downgrade exception like --request-tool 'shell(rm)'

Proposed solution

I would suggest another new CLI flag option like --request-tool.

We can currently combine --allow-all-tools with --deny-tool 'shell(rm)' but that actively prevents the CLI from trying to use rm at all. I would still like it to try to use that command, but still want it to ask for my permission on that command specifically.

Example prompts or workflows

copilot --allow-all-tools --request-tool 'shell(rm)'
copilot --allow-tool 'write' --allow-tool 'shell' --request-tool 'shell(git push)'
copilot --allow-all-tools --request-tool 'shell(npm install)'

Additional context

No response