Capability-based permissions model for fine-grained control over what the agent can do in CLI 3.0.