Feature request: per-scheduled-task permission scoping

Summary

Scheduled tasks (.claude/scheduled-tasks/) currently have no way to scope permissions to just that task. Permissions must be set globally (~/.claude/settings.json) or project-wide (.claude/settings.local.json), which is broader than desired.

Use case

A scheduled task (e.g. a daily dev summary) needs to run git, gh, and a custom script without user approval. Today the only options are:

• Allow these commands globally — affects all projects and sessions
• Allow them project-wide — affects all Claude sessions in that project

Neither is appropriately scoped.

Proposed solution

Support a permissions block in the scheduled task's SKILL.md frontmatter (or a sibling settings.json in the task directory), so permissions are only granted when that specific task runs.

---
name: daily-dev-summary
permissions:
  allow:
    - Bash(git:*)
    - Bash(gh:*)
---