fix(claude-code): make claude-unsafe fully bypass permission prompts

Consolidates the redundant claude-bypass/claude-danger aliases into one claude-unsafe (--dangerously-skip-permissions is documented as equivalent to --permission-mode bypassPermissions). That flag alone still honors permissions.nix's explicit ask list (git push, sudo, curl, etc.), so it wasn't actually a no-prompt escape hatch. Add an explicit --settings override with an empty ask array - CLI-arg precedence replaces that array outright - so the alias truly skips all prompts, while deny rules (rm -rf / circuit breaker) still merge across every settings layer and keep applying.

Author: khaneliman

modules/home/programs/terminal/tools/claude-code/default.nix

@@ -64,8 +64,13 @@ in
     xdg.dataFile."icons/claude.ico".source = claudeIcon;
 
     home.shellAliases = {
-      "claude-bypass" = "claude --permission-mode bypassPermissions";
-      "claude-danger" = "claude --dangerously-skip-permissions";
+      # --dangerously-skip-permissions / --permission-mode bypassPermissions alone still
+      # honor permissions.nix's explicit `ask` list (git push, sudo, curl, etc.) - only an
+      # explicit `--settings` override with an empty `ask` array clears it. `deny` still
+      # merges across every settings layer regardless, so the rm -rf / circuit breaker
+      # in permissions.nix keeps applying even under this alias.
+      "claude-unsafe" =
+        ''claude --permission-mode bypassPermissions --settings '{"permissions":{"ask":[],"defaultMode":"bypassPermissions"}}' '';
     };
 
     programs.claude-code = {