Describe the proposed change(s).

As a follow-up to #39458, we should wire in the ability to block ./gradlew

As this is already allowed, we should add this to the default value of allowedUnsafeExecution.

It'll then be removed in #39459