chore: update allowed_tools syntax + gitignore memory.bak

- Switch Bash permission patterns from space to colon separator
- Add memory.bak/ to .gitignore

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/claude_session.py

@@ -51,17 +51,17 @@ PERSONALITY_FILES = [
 _DEFAULT_ALLOWED_TOOLS = [
     "Read", "Edit", "Write", "Glob", "Grep",
     "WebFetch", "WebSearch",
-    "Bash(python3 *)", "Bash(.venv/bin/python3 *)",
-    "Bash(pip *)", "Bash(pytest *)",
-    "Bash(git *)",
-    "Bash(npm *)", "Bash(node *)", "Bash(npx *)",
-    "Bash(systemctl --user *)",
-    "Bash(trash *)", "Bash(mkdir *)", "Bash(cp *)",
-    "Bash(mv *)", "Bash(ls *)", "Bash(cat *)", "Bash(chmod *)",
-    "Bash(docker *)", "Bash(docker-compose *)", "Bash(docker compose *)",
-    "Bash(ssh *@10.0.20.*)", "Bash(ssh root@10.0.20.*)",
-    "Bash(ssh echo@10.0.20.*)",
-    "Bash(scp *10.0.20.*)", "Bash(rsync *10.0.20.*)",
+    "Bash(python3:*)", "Bash(.venv/bin/python3:*)",
+    "Bash(pip:*)", "Bash(pytest:*)",
+    "Bash(git:*)",
+    "Bash(npm:*)", "Bash(node:*)", "Bash(npx:*)",
+    "Bash(systemctl:--user *)",
+    "Bash(trash:*)", "Bash(mkdir:*)", "Bash(cp:*)",
+    "Bash(mv:*)", "Bash(ls:*)", "Bash(cat:*)", "Bash(chmod:*)",
+    "Bash(docker:*)", "Bash(docker-compose:*)", "Bash(docker compose:*)",
+    "Bash(ssh:*@10.0.20.*)", "Bash(ssh:root@10.0.20.*)",
+    "Bash(ssh:echo@10.0.20.*)",
+    "Bash(scp:*10.0.20.*)", "Bash(rsync:*10.0.20.*)",
 ]