feat: add --allow-all-files option to bypass the allow list
Add an option so the agent can work with all files in a repo, restricted only by the deny list (which still blocks .git, .env, secrets, etc.).
Changes:
- fs_policy.py: add allow_all flag to RepoPolicy + open_policy() factory
- git_tools_server.py: thread allow_all_files through serve/serve_multi and MultiRepoToolsServer
- config.py: add allow_all_files field, include --allow-all-files in tool server cmd when enabled
- cli.py: add --allow-all-files flag to chat, telegram, tools:git, and tools:git-multi subcommands
- telegram_bot.py: accept and forward allow_all_files
Usage: ./run.sh chat --repo . --allow-all-files ./run.sh telegram --repos-dir /projects --allow-all-files
The deny list (.git, .env, secrets, id_rsa, etc.) always applies.