DX: File access permission prompt should offer per-folder allow, not just all non-workspace access

[ykdojo]

When the CLI tries to read a file outside the current workspace, the permission prompt offers:

1. Yes, allow access
2. Yes, and always allow non-workspace access
3. No, deny access

Option 2 is too broad - it allows access to all non-workspace paths. There should be an option to allow access to just that specific folder, e.g. "Yes, and always allow access to /Users/me/other-project".