PowerShell command-safety checks extended for write commands with implicit reads

The PowerShell/pwsh command permission checker now also validates the read side of write operations, such as checking whether the source path of a copy or move is itself blocked. It also now requires an 'ask' approval for New-Item invoked with a force-like flag, via a new helper that gates these additional checks.