Block unapproved file reads in Cowork

CHANGELOG · original

Changed local Cowork sessions set to skip all approvals: the Artifact tool now refuses a local file outside the session's folders, or behind a symlink, instead of reading it without asking