feat(permission): complete shadow review events for offline analysis

- key inner-cmd decisive review events by requestId so link decisions join offline
- record judge runtime id, prompt and tool schema versions, end-to-end and model latency, input and output usage, and evidence-quality flags on every judge result row
- record forwarded and session-mismatch preflight defers so they stay visible in the offline denominator

packages/pi-permission-inner-cmd/src/handlers/timeout.ts

@@ -108,13 +108,17 @@ export const timeoutHandler: CommandHandler = {
         );
         switch (result.state) {
             case "allow":
+                // `requestId` joins this link decision to the gate's
+                // permission_request.* entries for offline analysis.
                 log.review("inner_cmd.allow", {
+                    requestId: details.requestId,
                     command: fullCommand,
                     innerCommand,
                 });
                 return { kind: "allow" };
             case "deny":
                 log.review("inner_cmd.deny", {
+                    requestId: details.requestId,
                     command: fullCommand,
                     innerCommand,
                 });