permissions: NotRequired[list[FilesystemPermission]]List of FilesystemPermission rules for this subagent.
If omitted, inherits the parent agent's permissions. If specified, replaces the parent's permissions entirely for this subagent.
Rules are evaluated in declaration order; the first match wins.
FilesystemMiddleware enforces these rules for the built-in filesystem
tools on the subagent stack.