pass --disallowedTools as a single comma-separated arg

claude-code's commander parser treats --disallowedTools as variadic
<tools...>, which silently absorbs extra tokens but may not enforce
them as reliably as a single comma-separated value. switch to the
form the CLI help documents ("Bash,Agent(Bash)") to make the deny
list unambiguous.

agents/claude.ts

@@ -591,8 +591,7 @@ export const claude = agent({
       "--effort",
       effort,
       "--disallowedTools",
-      "Bash",
+      "Bash,Agent(Bash)",
-      "Agent(Bash)",
     ];
 
     if (model) {