feat(dispatch): enforce dispatch ceiling, host-side push, and git exclude agent

[theonly1me]

What changed

• Set permissionMode: "dontAsk" for dispatched subagents so allowed tools form a strict ceiling.
• Pass --setting-sources user,project to Claude Code to prevent local settings from widening permissions.
• Stop passing bare empty strings when tool filter flags receive an empty list.
• Remove push permissions from subagents and execute pushes strictly host-side in the orchestrator.
• Add dynamic verification command detection across Bun, Cargo, Go, Python, and Makefile repos.
• Untrack .claude/agents/shadowclone.md and ignore it locally via .git/info/exclude to prevent profile leaks.

Why

Dispatched runs previously relied on interactive permission prompts that fell through to default policies. Untracked subagent profiles risked accidental git commits into target repositories. Host-side push orchestration and strict tool ceilings eliminate sandbox permission escapes.

How to verify

bun run typecheck
bun test
bun run check

Data handling

• Any new capture source has an opt-in flag and a README entry in this PR
• Everything that reaches the network passes redactSecrets
• No raw capture in a log line, an error message, or a test fixture
• A test exercises the real entry point, not just the redaction function