Auto mode becomes the default permission posture

What this changes for operators

• Operators with managed Claude Code deployments must re-audit what Auto mode classifies as safe by default — the consent gate is gone.
• Admins relying on the opt-in consent dialog as a visible posture check have lost that surface; equivalent visibility now comes from managed-settings policy, not from a runtime prompt.
• Skill authors should evaluate disallowed-tools for skills that should run with a reduced tool surface.
• Hook authors should consider whether MessageDisplay is a governance gain or a censorship hazard for their deployment.