Putting Claude Code inside Obsidian sounds like a convenience feature until you follow the permissions. Then it becomes something more consequential: your notes are no longer just context. They are a workspace an agent can read, search, edit, diff, compact, augment with MCP, and operate from with shell access. That