feat(runtime/events): 新增 PermissionRequest / PermissionResolved 运行时事件

[Cai-Tang-www]

Summary

• 在 runtime 新增事件类型：permission_request 与 permission_resolved。
• 新增结构化 payload：PermissionRequestPayload、PermissionResolvedPayload，统一输出 tool/action/decision/reason/rule 等字段。
• 在工具执行返回权限决策错误时发事件：
  • ask：先发 PermissionRequest，再发 PermissionResolved
  • deny：发 PermissionResolved
• 扩展 tools.PermissionDecisionError 的结构化访问能力（Action/Reason/RuleID），供 runtime 事件构建复用。
• 补充 runtime 与 tools 测试覆盖 ask/deny 事件链路和字段断言。

Test

• go test ./internal/runtime ./internal/tools
• go test ./...

Closes #158
Refs #98

[codecov]

Codecov Report

❌ Patch coverage is 86.15385% with 36 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
internal/tools/filesystem/result_filter.go	73.68%	5 Missing and 5 partials ⚠️
internal/tools/bash/executor.go	89.87%	4 Missing and 4 partials ⚠️
internal/tools/manager.go	62.50%	3 Missing and 3 partials ⚠️
internal/tools/bash/tool.go	75.00%	2 Missing and 2 partials ⚠️
internal/runtime/runtime.go	96.00%	1 Missing and 1 partial ⚠️
internal/tools/filesystem/glob.go	92.00%	1 Missing and 1 partial ⚠️
internal/tools/filesystem/grep.go	93.10%	1 Missing and 1 partial ⚠️
internal/tools/filesystem/read_file.go	71.42%	1 Missing and 1 partial ⚠️

📢 Thoughts on this report? Let us know!