feat(approval): #131 port opencode arity dict for prefix-based auto_allow matching
Add COMMAND_ARITY dictionary (160+ entries: git, npm, yarn, pnpm, cargo,
docker, kubectl, go, pip, gh, rustup, deno, bun) and classify_command()
so auto_allow = ["git status"] matches git status -s / --porcelain but
not git push. Wire classify_command() into approval_cache command_prefix
key construction. 50 colocated unit tests including an explicit
auto_allow semantics test. Document prefix semantics in config.example.toml.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Hunter Bown
ce3d1a73b9