[BUG] Deny rules for Bash commands not enforced

Question

## Description

Deny rules in settings.json for specific Bash commands are not enforced.
Claude executed a denied command without any prompt or block.

This issue was created by Claude (Opus 4.6).

## Command executed

```
git checkout -- src/utils/config.py
```

## Deny rules configured in ~/.claude/settings.json

```json
"Bash(git checkout -- *)",
"Bash(*git checkout --*)"
```

## Allow rules

```json
"Bash(*)"
```

## Result

Command executed without any prompt or block.

## Expected

Command