fix(security): define explicit permissionMode for all AIOS core agents

.claude/agents/aios-master.md

@@ -3,6 +3,7 @@ name: aios-master
 description: Use when you need comprehensive expertise across all domains, framework component creation/modification, workflow orchestration, or running tasks that don't require a specialized persona.
 memory: project
 model: sonnet
+permissionMode: bypassPermissions
 skills:
   - aios-master
   - project-context

.claude/agents/analyst.md

@@ -3,6 +3,7 @@ name: analyst
 description: Use for market research, competitive analysis, user research, brainstorming session facilitation, structured ideation workshops, feasibility studies, industry trends analysis, project discovery (brownfield documentation), and research re...
 memory: project
 model: sonnet
+permissionMode: default
 skills:
   - analyst
   - project-context

.claude/agents/architect.md

@@ -3,6 +3,7 @@ name: architect
 description: Use for system architecture (fullstack, backend, frontend, infrastructure), technology stack selection (technical evaluation), API design (REST/GraphQL/tRPC/WebSocket), security architecture, performance optimization, deployment strategy...
 memory: project
 model: sonnet
+permissionMode: acceptEdits
 skills:
   - architect
   - project-context

.claude/agents/data-engineer.md

@@ -3,6 +3,7 @@ name: data-engineer
 description: Use for database design, schema architecture, Supabase configuration, RLS policies, migrations, query optimization, data modeling, operations, and monitoring
 memory: project
 model: sonnet
+permissionMode: bypassPermissions
 skills:
   - data-engineer
   - project-context

.claude/agents/dev.md

@@ -3,6 +3,7 @@ name: dev
 description: Use for code implementation, debugging, refactoring, and development best practices
 memory: project
 model: sonnet
+permissionMode: bypassPermissions
 skills:
   - dev
   - project-context

.claude/agents/devops.md

@@ -3,6 +3,7 @@ name: devops
 description: Use for repository operations, version management, CI/CD, quality gates, and GitHub push operations. ONLY agent authorized to push to remote repository.
 memory: project
 model: sonnet
+permissionMode: bypassPermissions
 skills:
   - devops
   - project-context

.claude/agents/pm.md

@@ -3,6 +3,7 @@ name: pm
 description: Use for PRD creation (greenfield and brownfield), epic creation and management, product strategy and vision, feature prioritization (MoSCoW, RICE), roadmap planning, business case development, go/no-go decisions, scope definition, succes...
 memory: project
 model: sonnet
+permissionMode: default
 skills:
   - pm
   - project-context

.claude/agents/po.md

@@ -3,6 +3,7 @@ name: po
 description: Use for backlog management, story refinement, acceptance criteria, sprint planning, and prioritization decisions
 memory: project
 model: sonnet
+permissionMode: default
 skills:
   - po
   - project-context

.claude/agents/qa.md

@@ -3,6 +3,7 @@ name: qa
 description: Use for comprehensive test architecture review, quality gate decisions, and code improvement. Provides thorough analysis including requirements traceability, risk assessment, and test strategy. Advisory only - teams choose their quality...
 memory: project
 model: sonnet
+permissionMode: acceptEdits
 skills:
   - qa
   - project-context

.claude/agents/sm.md

@@ -3,6 +3,7 @@ name: sm
 description: Use for user story creation from PRD, story validation and completeness checking, acceptance criteria definition, story refinement, sprint planning, backlog grooming, retrospectives, daily standup facilitation, and local branch managemen...
 memory: project
 model: sonnet
+permissionMode: default
 skills:
   - sm
   - project-context

.claude/agents/squad-creator.md

@@ -3,6 +3,7 @@ name: squad-creator
 description: Use to create, validate, publish and manage squads
 memory: project
 model: sonnet
+permissionMode: acceptEdits
 skills:
   - squad-creator
   - project-context

.claude/agents/ux-design-expert.md

@@ -3,6 +3,7 @@ name: ux-design-expert
 description: Complete design workflow - user research, wireframes, design systems, token extraction, component building, and quality assurance
 memory: project
 model: sonnet
+permissionMode: acceptEdits
 skills:
   - ux-design-expert
   - project-context