What: New allowGitConfig option to control sandbox access to .git/config files. Details:
- Defaults to false (no access)
- When disabled,
.git/configis excluded from sandbox read allowlist - Accessible via
filesystem.allowGitConfigconfiguration - Evidence:
xc0()at line 49880, sandbox path handling at line 5178