--allow-all-tools not allowing gh cli commands to run by default

[jacdavis]

Describe the bug

I found this because the github mcp is currently disabled when running with -p. I suspect this is another path validation issue which implies we really do need to enable allow all paths when --allow-all-tools is passed

Affected version

No response

Steps to reproduce the behavior

No response

Expected behavior

No response

Additional context

No response

[jacdavis]

Evan believes this is due to the token getting scrubbed from the env on bash invocation

[jacdavis]

Resolving as Evan has a dupe in the other repo.