feat: enable firewall on claude and remove hooks

[Copilot]

Enables AWF (Agent Workflow Firewall) support for Claude engine, replacing the legacy hooks-based network permissions system. Updates AWF to v0.4.0.

Changes

• Claude engine now uses AWF binary for network access control (matching Copilot's implementation)
• Removed deprecated Python hooks and settings.json based network permissions
• Updated enableFirewallByDefault to use engine interface instead of string-based ID
• Added GetClaudeAllowedDomains helper for Claude-specific domain handling
• Updated documentation to reflect Claude's firewall support

Configuration

Both engines now use identical firewall configuration:

engine: claude # or copilotnetwork:
firewall: trueallowed:
- defaults
- python
- "api.example.com"

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.