* Blocks dangerous bash commands before they execute. * This replicates the safety behavior that Claude Code provides by default. * Drop this in ~/.pi/agent ...