refactor(permission-system): reorganize path permissions and add vault access

config/pi/agent/extensions/pi-permission-system/config.json

@@ -1,26 +1,26 @@
 {
-  "permission": {
+    "permission": {
-    "*": "ask",
+        "*": "ask",
-    "path": {
+        "path": {
-      "./*": "allow",
+            "./*": "allow",
-      "./.*": "allow",
+            "./.*": "allow",
-      "~/.ssh/*": "deny",
+            "~/.ssh/*": "deny",
-      "*.env": "deny",
+            "*.env": "deny",
-      "*.env.*": "deny",
+            "*.env.*": "deny",
-      "*.env.example": "allow",
+            "*.env.example": "allow"
-      "/tmp/*": "ask"
+        },
+        "bash": {
+            "*": "ask",
+            "rm -rf *": "deny",
+            "sudo *": "ask"
+        },
+        "external_directory": {
+            "*": "ask",
+            "/tmp/*": "ask",
+            "~/Documents/sjb-brain/*": "allow"
+        }
     },
-    "bash": {
+    "debugLog": false,
-      "*": "ask",
+    "permissionReviewLog": true,
-      "rm -rf *": "deny",
+    "yoloMode": true
-      "sudo *": "ask"
-    },
-    "external_directory": {
-      "*": "ask",
-      "~/Documents/sjb-brain/*": "allow"
-    }
-  },
-  "debugLog": false,
-  "permissionReviewLog": true,
-  "yoloMode": true
 }