Epic: Config-driven evaluation

[butterflysky-ai]

Goal

Replace compiled specs with TOML config.

Issues

• Config-driven command evaluation: replace compiled specs with declarative rules #14 — declarative rules
• feat: config-driven subcommand matching — express rules in TOML, not Rust #55 — config-driven subcommand matching
• Support subcommand-aware wrapper commands (distrobox, docker exec, kubectl exec) #9 — subcommand-aware wrappers

Notes

Moving tool evaluation logic from compiled Rust code to declarative TOML configuration, making it possible to add and tune rules without recompilation.

#52 and #53 are duplicate epics for permissions fatigue — #52 should be closed as dupe of #53.