scripts(install): merge java-direct + ~/.eclipse into sandbox allowWrite

Without these, Claude Code users running install.sh on a fresh repo
would hit two sandbox blocks java-direct can't recover from:

- ~/.cache/java-direct/** — wrapper state dir + per-workspace
  jdt-data subdir
- ~/.eclipse/** — Equinox launcher extracts JNI native libs here
  on first jdtls start (one-time write, then read-only)

Both are now in the install.sh jq merge alongside the existing five
*-direct cache entries. Documented in docs/troubleshooting.md as the
manual fallback if a user doesn't run install.sh.

Author: Blanquitoh

scripts/install.sh

@@ -94,14 +94,17 @@ if [ -f "$SETTINGS" ]; then
       "Bash(~/.claude/bin/vue-direct *)",
       "Bash(~/.claude/bin/py-direct *)",
       "Bash(~/.claude/bin/ts-direct *)",
-      "Bash(~/.claude/bin/cs-direct *)"
+      "Bash(~/.claude/bin/cs-direct *)",
+      "Bash(~/.claude/bin/java-direct *)"
     ] | unique)
     | .sandbox.filesystem.allowWrite = ((.sandbox.filesystem.allowWrite // []) + [
       "~/.cache/metals-direct/**",
       "~/.cache/vue-direct/**",
       "~/.cache/py-direct/**",
       "~/.cache/ts-direct/**",
-      "~/.cache/cs-direct/**"
+      "~/.cache/cs-direct/**",
+      "~/.cache/java-direct/**",
+      "~/.eclipse/**"
     ] | unique)
   ' "$SETTINGS" > "$TMP" && mv "$TMP" "$SETTINGS"
   log "  merged (backup at $SETTINGS.bak-<ts>)"