setup: base permissions for MCP tools over Bash (RT-326)

[m4ttheweric]

Drops the glab and rt runs/skills sync allow rules now that those calls move to mattstack MCP tools, keeps rt gate, adds rt chat tail and rt events wait (the long Monitor waits skills still run in Bash).

Do not cut a release until the RT-326 skill waves land; fresh installs would otherwise prompt on glab/rt runs.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Permissions
  • The baseline permission set no longer allows GitLab CLI commands or the rt skills sync and rt runs commands.
  • It now allows rt chat tail and rt events wait commands. The existing rt gate permission remains.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: d2ef509f-bdb5-4345-8437-a77a665a5e38

📥 Commits

Reviewing files that changed from the base of the PR and between 51e1458 and aa4185b.

📒 Files selected for processing (3)

• lib/setup/__tests__/base-permissions.test.ts
• lib/setup/__tests__/steps-c.test.ts
• lib/setup/base-permissions.ts

 _______________________________________________________________________________________________________________________________________________________________________________________________________________________________________
< There are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies, and the other way is to make it so complicated that there are no obvious deficiencies. - C.A.R. Hoare >
 ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
  \
   \   \
        \ /\
        ( )
      .( o ).

✨ Finishing Touches

📝 Generate docstrings

• Commit to this branch
• Create a new PR

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

---

_{Comment @coderabbitai help to get the list of available commands.}