Kiro CLI now asks you to trust a folder before loading its hooks, agents, and MCP servers

Since Oct 20, the first interactive V3 session in a folder shows a "Trust this workspace?" screen before Kiro CLI loads that folder's hooks, agents, MCP servers, steering, workflows, or language server config, so a cloned repo can't change agent behavior until you say so. Answers are saved per workspace root under ~/.kiro/workspace-roots/, though your home directory is never remembered and asks every launch.