Running in an untrusted folder seems to break

[connor4312]

Testing #290636

1. Try to run in an untrusted folder
2. You get 3x prompts to trust folder/.git
3. If you cancel those, you get a message that the workspace isn't trusted. The agent still responds, although it seems to not be in the right folder

[connor4312]

The agent can still respond without trust if you send followup messages, and you get double prompts:

Kapture.2026-01-29.at.10.43.33.mp4