Change default permissions for bash, edit, and webfetch from allow → ask

[GregorLohaus]

This PR changes the defaults for bash, edit, and webfetch tools to ask instead of allow.

Why:

Safety: Prevents accidental shell commands, file edits, or network requests that could be destructive or surprising for new users.

Trust & onboarding: New users expect potentially risky actions to require confirmation. Default-allow can feel unsafe and discourage adoption.

I was personally burned by these defaults when trying out opencode for the first time and qwen 3 coder just edited files with shell commands when it could not use the edit tool because it was in Planning mode.

The gemini-cli defaults to ask which felt much saner when trying it out i don't expect an ai-cli tool to just let an agent run arbitrary shell commands on my system by default.

[David-Else]

Why

    bash: {
        "*": "ask",
      },

rather than

    "bash": "ask",

?

https://opencode.ai/docs/permissions/#bash

I don't understand why this PR is not default, I don't want the agent all over my hard drive by default!

[GregorLohaus]

rebased