row 228: trim the README allowlist sentence to one reader point (N1, #1729)

(cherry picked from commit c336f8d18ae3f1e9fe826160c825a26e4766b759)

packages/cli/README.md

@@ -435,9 +435,8 @@ set, a Claude Code launch refuses `no-session-credential` before anything
 starts. A Pi session gets the same variables through the allowlist. A Pi
 session on provider `zai` logs in with `ZAI_API_KEY`, which the allowlist
 passes. Like every allowlist variable, it reaches every session the host
-starts, Claude Code ones included, and a shell inside any of them can read
-it. A shell the harness opens, Claude Code's `Bash` or Pi's `bash`, can read
-them.
+starts, Claude Code ones included. A shell the harness opens, Claude Code's
+`Bash` or Pi's `bash`, can read all of these variables.
 
 A Pi session logs in only through the variables `ENV_ALLOW` passes. Its
 `HOME` is the run's own, so Pi never reads the operator's `~/.pi/agent`