fix: move mise security settings to fish env

[djensenius]

Summary

• move mise security-sensitive settings out of the symlinked repo TOML config
• export those settings from fish before mise initializes
• keep mise tool/version config in mise/config.toml

Validation

• yamllint on tracked YAML files
• tomllint on tracked TOML files
• fish --no-execute on tracked fish files
• fish_indent formatting check on tracked fish files
• actionlint

[Copilot]

Pull request overview

This PR moves mise security-sensitive configuration (trust roots and GitHub credential command) out of the symlinked mise/config.toml and into Fish environment variables set before mise initialization, keeping the TOML focused on tool/version configuration.

Changes:

• Removed trusted_config_paths, [settings.github].credential_command, and related interactive settings from mise/config.toml.
• Exported the equivalent mise settings via MISE_* environment variables in fish/config.fish ahead of mise activate.
• Preserved the existing “initialize mise early” flow so tools remain available across shells.

Show a summary per file

File	Description
mise/config.toml	Removes security-sensitive/trust-related settings from the repo-symlinked mise config.
fish/config.fish	Exports mise trust + GitHub credential settings via environment before mise initialization.

Copilot's findings

• Files reviewed: 2/2 changed files
• Comments generated: 0