Auto mode now blocks specific destructive git/IaC commands and reclassifies scheduled-task and webhook triggers

What this changes for operators

• 2.1.183 enumerated destructive commands the auto-mode classifier now blocks — git reset --hard, git checkout -- ., git clean -fd, git stash drop (when you did not ask to discard work), git commit --amend for commits the agent did not make this session, and terraform/pulumi/cdk destroy unless you asked for the specific stack.
• 2.1.183 also fixed scheduled-task and webhook trigger deliveries being treated as keyboard input; they now classify as task notifications and can no longer approve a pending action or set the session title under auto mode.
• Operators running auto mode should upgrade past 2.1.183; the blocks are conditional (gated on what you asked for), not unconditional refusals.