Update readme

Author: rmorse

README.md

@@ -3,8 +3,9 @@
 A command-line interface for the [HelpScout](https://www.helpscout.com/) API. Manage mailboxes, conversations, customers, tags, users, workflows, and webhooks from the terminal.
 
 > **Built for shared and AI-assisted workflows**
-> hs-cli ships with a deterministic, layered PII redaction pipeline (structured fields + free-text + source payload protection), plus strict per-command override controls.  
-> See [PII Redaction Pipeline](#pii-redaction-pipeline).
+> hs-cli ships with a deterministic, layered PII redaction pipeline (structured fields + free-text + source payload protection), plus strict per-command override controls.
+> An allowlist-based permission system (`resource:operation` pairs) lets you restrict exactly which actions are permitted.
+> See [PII Redaction Pipeline](#pii-redaction-pipeline) · [Permissions](#permissions).
 
 ## Install