fix(claude): keep permissions.defaultMode on auto

[phall1]

The last standing dot-doctor warning, resolved in favour of auto.

dot_claude/modify_settings.json merges its managed block over whatever is on disk with managed winning (. * $managed), so it re-asserted permissions.defaultMode=bypassPermissions on every apply while the live file sat on auto. That is a disagreement about permission posture, not drift — chezmoi and the running tool each wanted a different answer, and chezmoi re-add cannot capture it because a modify_ script computes its output.

The script now asserts auto, so the two agree and the warning cannot recur.

skipDangerousModePermissionPrompt is left as-is: it suppresses the confirmation when bypass mode is entered deliberately and does not select the mode, so it is unaffected.

Verification

$ sh -n dot_claude/modify_settings.json                      # syntax OK
$ cat ~/.claude/settings.json | sh dot_claude/modify_settings.json | jq -r .permissions.defaultMode
auto
$ chezmoi diff ~/.claude/settings.json                       # empty — no drift
$ diff <(jq -S . ~/.claude/settings.json) <(cat ~/.claude/settings.json | sh dot_claude/modify_settings.json | jq -S .)
                                                             # identical — nothing else touched

herdr's SessionStart hook survives the merge, which is the property the script exists to protect.

Expected after merge: dot-doctor → no warnings, no failures.

🤖 Generated with Claude Code