refactor(permission): consume structured bash payload

- require @gotgenes/pi-permission-system >=25.3.0 and read the complete local bash command from PromptPermissionDetails.payload instead of session-walking recovery
- remove the @sikongjueluo/pi-permission-shared package
- pass the triggering command unit to handlers via HandlerContext.unit in place of details.command
- add shadow-only AI judge modules for evidence projection, structured verdict requests, and prompt building, with vitest coverage
- record ADR 0004 and mark the ADR 0001 recovery mechanism superseded
- exclude pi-permission-system 25.3.0 from the pnpm minimumReleaseAge guard

packages/pi-permission-ai-judge/package.json

@@ -14,24 +14,18 @@
   "peerDependencies": {
     "@earendil-works/pi-ai": "*",
     "@earendil-works/pi-coding-agent": "*",
-    "@gotgenes/pi-permission-system": ">=20.10.0"
+    "@gotgenes/pi-permission-system": ">=25.3.0"
   },
-  "dependencies": {
-    "@sikongjueluo/pi-permission-shared": "workspace:*"
-  },
-  "bundledDependencies": [
-    "@sikongjueluo/pi-permission-shared"
-  ],
   "devDependencies": {
     "@earendil-works/pi-ai": "*",
     "@earendil-works/pi-coding-agent": "*",
-    "@gotgenes/pi-permission-system": ">=20.10.0",
+    "@gotgenes/pi-permission-system": ">=25.3.0",
     "@types/node": "^26.0.0",
     "typescript": "^5",
     "vitest": "^3"
   },
   "scripts": {
     "check": "tsc --noEmit",
-    "test": "vitest run --passWithNoTests"
+    "test": "vitest run"
   }
 }