feat(agents): normalize option keys to snake_case

[pocky]

Summary

• Normalize all agent provider option keys from camelCase to snake_case (allowedTools → allowed_tools, dangerouslySkipPermissions → dangerously_skip_permissions) — this is a breaking change; old keys are silently ignored
• Extend dangerously_skip_permissions support to Gemini (--approval-mode=yolo) and Codex (--yolo), making permission bypass available uniformly across all three CLI providers
• Remove dead helper functions getWorkflowID() and getStepName() whose keys were never injected by any caller, and simplify audit log entries by dropping redundant workflow/step fields
• Add tests verifying snake_case key recognition and that camelCase keys no longer trigger the security audit warning

Changes

Application Layer

• internal/application/execution_service.go: Update audit log key lookup from dangerouslySkipPermissions to dangerously_skip_permissions
• internal/application/execution_service_dangerous_skip_audit_test.go: New test suite verifying snake_case key fires audit warning and camelCase key does not

Agent Providers

• internal/infrastructure/agents/claude_provider.go: Rename option key lookups to allowed_tools and dangerously_skip_permissions; remove workflow/step fields from audit log
• internal/infrastructure/agents/gemini_provider.go: Add dangerously_skip_permissions support mapping to --approval-mode=yolo
• internal/infrastructure/agents/codex_provider.go: Add dangerously_skip_permissions support mapping to --yolo
• internal/infrastructure/agents/cli_executor.go: Related cleanup

Dead Code Removal

• internal/infrastructure/agents/helpers.go: Remove getWorkflowID() and getStepName() dead helpers
• internal/infrastructure/agents/helpers_test.go: Remove tests for deleted helpers

Tests

• internal/infrastructure/agents/claude_provider_unit_test.go: Update all option key references to snake_case; add CLI argument construction tests for both renamed keys
• internal/infrastructure/agents/claude_provider_test.go: Update integration test option key to allowed_tools
• internal/infrastructure/agents/codex_provider_unit_test.go: Add tests for dangerously_skip_permissions flag mapping
• internal/infrastructure/agents/gemini_provider_unit_test.go: Add tests for dangerously_skip_permissions flag mapping
• tests/integration/validation/validation_providers_test.go: Update option keys in validation fixtures

Documentation & Config

• docs/user-guide/agent-steps.md: Document allowed_tools and dangerously_skip_permissions for Claude, Codex, and Gemini with security warnings
• CHANGELOG.md: Add breaking change notice and feature/removal entries under Unreleased
• CLAUDE.md: Add architecture rule for per-provider flag mapping; add pitfall rules for dead helper cleanup and consistent option key naming

Test plan

• Run unit tests: make test-unit — all provider option key tests pass
• Verify camelCase keys are silently ignored: set dangerouslySkipPermissions: true in a workflow YAML and confirm no permission skip occurs
• Verify snake_case keys work end-to-end: set dangerously_skip_permissions: true for each provider and confirm the corresponding CLI flag is passed
• Run lint: make lint — no camelCase option key references remain

Closes #300

---

Generated with awf commit workflow