fix(DIS-152): add Glob and Grep permissions for mapped host paths

Glob and Grep are separate tools from Read in Claude Code's permission
model — the agent was triggering permission prompts when trying to use
Glob on the host path even though Read was allowed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/agent/identity.ts

@@ -190,6 +190,8 @@ export function createClaudeConfig(
     allow.push(`Read(${normalized}/**)`);
     allow.push(`Write(${normalized}/**)`);
     allow.push(`Edit(${normalized}/**)`);
+    allow.push(`Glob(${normalized}/**)`);
+    allow.push(`Grep(${normalized}/**)`);
   }
 
   // Deny list — the ../** rules are only added when there are NO path mappings.