The allowed-tools pattern was missing :* suffix, causing permission check failures when arguments were passed to the setup script via ```! block. Fixes anthropics/claude-code#16398