File deletion safety: rm hook, batch manifest, undo

[raulriera]

Advanced deletion safety beyond the current Trash-based approach:

• PreToolUse hook to intercept rm commands in Bash
• Batch operation manifest / aggregate approval
• Operation undo beyond Trash

See opportunity doc for full design.