fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox#28221

ompatel-aiml merged 2 commits into

google-gemini:maingoogle-gemini/gemini-cli:mainfrom

ompatel-aiml:standup/2026-06-30-harden-gemini-gitconfig-write-scopeompatel-aiml/gemini-cli:standup/2026-06-30-harden-gemini-gitconfig-write-scopeCopy head branch name to clipboard