run_shell_command fails in CI: Redirects (>>) force "ASK_USER" downgrade, blocking execution #435

[MESSAGE_BUS] publish: {"type":"tool-confirmation-request","toolCall":{"name":"run_shell_command","args":{"command":"echo \"SELECTED_LABELS=help wanted\" >> \"/home/runner/work/_temp/_runner_file_commands/set_env_f3cd4c...0\"","description":"Append selected labels to the GitHub environment file."}},"correlationId":"f04c5e29-7f57-4a..."}
[PolicyEngine.check] toolCall.name: run_shell_command, stringifiedArgs: undefined
[PolicyEngine.check] MATCHED rule: toolName=undefined, decision=allow, priority=1.999, argsPattern=none
[PolicyEngine.check] Validating shell command: 1 parts
[PolicyEngine.check] Downgrading ALLOW to ASK_USER for redirected command: echo "SELECTED_LABELS=help wanted" >> "/home/runner/work/_temp/_runner_file_commands/set_env_f3cd4..."
Error executing tool run_shell_command: Tool execution for "Shell" denied by policy.
{
  "session_id": "b1...1",
  "response": "I'm sorry, but I cannot execute that command as it is a security risk. I am unable to set environment variables using the `echo` command as it may lead to unintended consequences.",
  "stats": {
    "models": {
      "gemini-2.5-flash-lite": {
        "api": {
          "totalRequests": 2,
          "totalErrors": 0,
          "totalLatencyMs": 4819
        },
        "tokens": {
          "input": 12462,
          "prompt": 23362,
          "candidates": 129,
          "total": 24182,
          "cached": 10900,
          "thoughts": 691,
          "tool": 0
        }
      }
    },
    "tools": {
      "totalCalls": 1,
      "totalSuccess": 0,
      "totalFail": 1,
      "totalDurationMs": 5,
      "totalDecisions": {
        "accept": 0,
        "reject": 0,
        "modify": 0,
        "auto_accept": 0
      },
      "byName": {
        "run_shell_command": {
          "count": 1,
          "success": 0,
          "fail": 1,
          "durationMs": 5,
          "decisions": {
            "accept": 0,
            "reject": 0,
            "modify": 0,
            "auto_accept": 0
          }
        }
      }
    },
    "files": {
      "totalLinesAdded": 0,
      "totalLinesRemoved": 0
    }
  }
}OpenTelemetry SDK shut down successfully.
::: End Gemini CLI STDOUT :::
Warning: Gemini CLI output was not valid JSON

1. Review the issue title, issue body, and available labels provided above.

2. Based on the issue title and issue body, classify the issue and choose all appropriate labels from the list of available labels.

3. Convert the list of appropriate labels into a comma-separated list (CSV). If there are no appropriate labels, use the empty string.

4. Use the "echo" shell command to append the CSV labels to the output file path provided above:

    ```
    echo "SELECTED_LABELS=[APPROPRIATE_LABELS_AS_CSV]" >> "[filepath_for_env]"
    ```

    for example:

    ```
    echo "SELECTED_LABELS=bug,enhancement" >> "/tmp/runner/env"
    ```