An enterprise deploys managed settings to all laptops that include a deny rule for Bash(curl:*). A developer's project .claude/settings.json contains an allow rule for Bash(curl:*), and the developer's user settings also allow it. The developer asks Claude Code to run curl https://example.com. What happens?