feat(claude-code-settings): add sandbox.filesystem allowRead and allowManagedReadPathsOnly (SchemaStore#5527)

Co-authored-by: domdomegg <domdomegg@users.noreply.github.com>

Author: ant-kurt

src/schemas/json/claude-code-settings.json

@@ -1281,6 +1281,18 @@
                 "minLength": 1
               },
               "description": "Paths where subprocesses are explicitly denied read access"
+            },
+            "allowRead": {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              },
+              "description": "Paths to re-allow reading within denyRead regions. Takes precedence over denyRead for matching paths"
+            },
+            "allowManagedReadPathsOnly": {
+              "type": "boolean",
+              "description": "When true (managed settings only), only allowRead paths from managed settings are used"
             }
           },
           "additionalProperties": false