Add session permission support to background agents for denying questions

Implements question-denied session permission rules when creating child
sessions via background task delegation. This prevents subagents from
asking questions by passing explicit permission configuration during
session creation.

🤖 GENERATED WITH ASSISTANCE OF OhMyOpenCode

src/shared/question-denied-session-permission.ts

@@ -0,0 +1,9 @@
+export type SessionPermissionRule = {
+  permission: string
+  action: "allow" | "deny"
+  pattern: string
+}
+
+export const QUESTION_DENIED_SESSION_PERMISSION: SessionPermissionRule[] = [
+  { permission: "question", action: "deny", pattern: "*" },
+]