[Bug] `rm` with glob patterns prompts for directory access in acceptEdits mode

Bug Description
Bug: rm with glob triggers unexpected directory access prompt in acceptEdits mode

In acceptEdits mode, rm ./pattern-* prompts "allow access to [directory]" even though:

• Already in acceptEdits mode
• ls ./pattern-* works fine
• rm ./file1 ./file2 (explicit names) works fine

Repro: In acceptEdits mode, run touch ./test-1 ./test-2 then rm ./test-* - the rm prompts for directory access unexpectedly.

Environment Info

• Platform: darwin
• Terminal: WezTerm
• Version: 2.1.27
• Feedback ID: e517bda1-9b23-449c-8e62-370dd2907129

Errors

[{"error":"Error: NON-FATAL: Lock acquisition failed for /Users/yoav/.local/share/claude/versions/2.1.27 (expected in multi-process scenarios)\n    at DUR (/$bunfs/root/claude:3589:2098)\n    at jPA (/$bunfs/root/claude:3589:1209)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-01-31T05:09:42.301Z"},{"error":"SyntaxError: JSON Parse error: Property name must be a string literal\n    at <parse> (:0)\n    at parse (unknown)\n    at <anonymous> (/$bunfs/root/claude:69:855)\n    at A (/$bunfs/root/claude:11:7244)\n    at YC8 (/$bunfs/root/claude:3893:2647)\n    at async sxB (/$bunfs/root/claude:3893:5433)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-01-31T05:09:46.803Z"}]