chore(perms): explicit ask-gate for all magic MCP tools (job8 A)

Empty allowlist stays empty for mcp__magic__* (deny-by-default,
no auto-exec ever). All 4 tools now explicit in permissions.ask
so confirmation is guaranteed regardless of default-mode fallthrough,
instead of relying on undocumented absence. No wildcard.

settings.json

@@ -226,7 +226,11 @@
       "Bash(mv *)",
       "Bash(git stash pop*)",
       "Bash(git stash drop*)",
-      "Bash(git stash clear)"
+      "Bash(git stash clear)",
+      "mcp__magic__21st_magic_component_builder",
+      "mcp__magic__21st_magic_component_refiner",
+      "mcp__magic__21st_magic_component_inspiration",
+      "mcp__magic__logo_search"
     ],
     "defaultMode": "auto",
     "disableBypassPermissionsMode": "disable",