Remove hardcoded development paths (ralph-loop, loop-test2) and absolute-path permissions from the allow list, keeping only project-agnostic and relative-path permissions.
