Enterprise managed permissions for GitHub Copilot agent operations

GitHub added enterprise‑wide managed permissions for Copilot agents, letting admins block, require approval, or allow shell, file and network actions. The controls apply across the Copilot app, CLI and VS Code, and cannot be overridden by user settings. This tightens security without stopping workflows.