Auto mode gains a new fallback-to-ask reason for first-time outside-directory reads

Auto mode tool execution now checks a new condition that, when triggered, opens the session's outside-read prompt dialog and falls back to asking the user instead of proceeding automatically. The decision is tagged with reason outside_read_first_prompt, and the result is marked with offersBlockOutsideReads.