Polish the "Run VS Code command" tool

[alexr00]

The approvals for this are pretty broad. We should try to do the following:

• Narrow approvals to specific commands
• Allowlist some commands
• Improve rendering of commands so it's clearer what's going to run

[DonJayamanne]

@rebornix wouldn't we need this does CLI and others
What we'd ended up playing catch-up for new features again

[alexr00]

@DonJayamanne I'm not sure I understand. What will we be playing catch up with?

[DonJayamanne]

If this is added fore core tools, we'll miss them for Copilot CLI, and then I'll need to ensure later that we add them for Copilot CLI.
For copilot CLI, Core doesn't invoke the tools, but we use cores confirmation prompts.
I'm not saying we should delay your work, just trying to raise awareness with Peng so that we can try to plan for this. Things like this are always bound to happen, i.e. adding new features/changes for VS Codes Local agent