pitchfork needs trust capability like mise has, it's dangerous to autostart any `pitchfork.toml` in cwd