Enforce workspace git permission rules to prevent AI agents from force-pushing | saasbrowser.ai