Enforce workspace git permission rules to prevent AI agents from force-pushing | SaaSBrowser.ai