Harden inherited CLI argument parsing

Avoid consuming parent prompts after forwarded boolean flags and scope inherited project trust so --approve only applies when child cwd matches the parent.