Disable reading outside project dir for VS Extension and update auto-approval docs for current feature set and design

[lambertjosh]

Context

This PR includes two changes, which probably should have been broken out individually.

1. Setting the default value of auto-approval for reading outside of the workspace dir to false. I personally I believe this is the behavior most users expect, and can help prevent accidents.
2. Updates the documentation to match the current feature set and design of the auto-approval feature.

Implementation

Changes the default for auto-approval for read operations outside of the workspace.

How to Test

1. Open the Auto-Approval settings screen on a fresh install. Reading from files outside of workspace should be disabled.
2. On an existing installation prior to updating to this new code, enable this setting. Then update to this code, and validate that it does not overwrite your existing settings.

Get in Touch

Discord: joshcodeskilo

[changeset-bot]

🦋 Changeset detected

Latest commit: 6a64ac2

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
kilo-code	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[lambertjosh]

@RSO - could you do a review? I probably should have split these out into just a docs PR and then the default change, and can do that if this ends up being at all controversial or at risk of being reverted. Again big concern here if we agree this is the right default, is if override existing user settings.

@emilieschario - also adding you for a review, since we discussed this today and it turns out the VS Code extension also had the same default.

Related to #4186