Function evaluate_permissions 

pub fn evaluate_permissions(
    config: &PermissionsConfig,
    workspace_root: &Path,
    current_dir: &Path,
    request: &PermissionRequest,
) -> PermissionRuleMatches

Evaluates a permission request against the global permission configuration and returns which rule tiers matched.