lock file access to agent might reveal surface for dependency vulnerabilities exploitations

[yash-dot-com]

how to fix

• needs proper measure & system prompt hardening
• treat uv sync on an untrusted repository as a potentially sensitive operation, because installing project dependencies can execute package build processes or otherwise introduce supply-chain risk.
• permission mechanism should therefore probably cover uv sync too when operating on an unfamiliar repository.

[yash-dot-com]

included in day 2 scope

• will add security measures and user permission prompts for unsafe commands.