feat(policy): map --yolo to allowedTools wildcard policy

This PR maps the `--yolo` flag natively into a wildcard policy array
(`allowedTools: ["*"]`) and removes the concept of `ApprovalMode.YOLO` as a
distinct state in the application, fulfilling issue #11303.

This removes the hardcoded `ApprovalMode.YOLO` state and its associated
UI/bypasses. The `PolicyEngine` now evaluates YOLO purely via data-driven rules.

- Removes `ApprovalMode.YOLO`
- Removes UI toggle (`Ctrl+Y`) and indicators for YOLO
- Removes `yolo.toml`
- Updates A2A server and CLI config logic to translate YOLO into a wildcard tool
- Rewrites policy engine tests to evaluate the wildcard
- Enforces enterprise `disableYoloMode` and `secureModeEnabled` controls
  by actively preventing manual `--allowed-tools=*` bypasses.

Fixes #11303

packages/cli/src/ui/components/ShortcutsHelp.tsx

@@ -23,7 +23,6 @@ const buildShortcutItems = (): ShortcutItem[] => [
   { key: '@', description: 'select file or folder' },
   { key: 'Double Esc', description: 'clear & rewind' },
   { key: formatCommand(Command.FOCUS_SHELL_INPUT), description: 'focus UI' },
-  { key: formatCommand(Command.TOGGLE_YOLO), description: 'YOLO mode' },
   {
     key: formatCommand(Command.CYCLE_APPROVAL_MODE),
     description: 'cycle mode',
@@ -64,16 +63,14 @@ export const ShortcutsHelp: React.FC = () => {
   const itemsForDisplay = isNarrow
     ? items
     : [
-        // Keep first column stable: !, @, Esc Esc, Tab Tab.
         items[0],
-        items[5],
-        items[6],
-        items[1],
         items[4],
-        items[7],
+        items[5],
+        items[1],
+        items[6],
         items[2],
+        items[7],
         items[8],
-        items[9],
         items[3],
       ];