fix(agents): fix bug-hunt-pool-supervisor bash permission block

- Add missing ': allow' suffix to 'git clone*' entry (was a bare key,
  effectively null/denied, breaking Worker Mode clone step)
- Add 'rm -rf /tmp/*': allow for mandatory clone cleanup on exit

ISSUES CLOSED: #10820

.opencode/agents/bug-hunt-pool-supervisor.md

@@ -30,8 +30,10 @@ permission:
     "wc *": allow
     "head *": allow
     "tail *": allow
+    # Cleanup (mandatory on exit):
+    "rm -rf /tmp/*": allow
     # Read-only git commands:
-    "git clone*"
+    "git clone*": allow
     "git log*": allow
     "git status*": allow
     "git diff*": allow