one-off-session-permissions-accumulate-in-settings-local-json

During active sessions, permission entries accumulate in settings.local.json as one-off grants that don’t belong in persistent config. These must be identified and reverted at session close (Phase 1.6/2) per feedback_no_bloat.md — only reusable patterns belong in config. Silent accumulation over multiple sessions creates permission sprawl that is hard to audit.