Manually review code edits while allowing network access

What feature would you like to see?

Problem
I want to review all code changes before accepting, but I don't want to manually approve each network access request. I cannot set `network_access = true without using the sandbox_workspace_write sandbox mode, but this mode automatically accepts all edits.

Solution
Separate edit approval, command approval, network access into different config options that can be controlled with config.toml

Additional information

_No response_