feat(permission): complete shadow review events for offline analysis

- key inner-cmd decisive review events by requestId so link decisions join offline
- record judge runtime id, prompt and tool schema versions, end-to-end and model latency, input and output usage, and evidence-quality flags on every judge result row
- record forwarded and session-mismatch preflight defers so they stay visible in the offline denominator

packages/pi-permission-inner-cmd/test/authorizer.test.ts

@@ -172,6 +172,7 @@ describe("authorizeInnerCommand — recognized wrapper verdicts", () => {
                 level: "review",
                 event: "inner_cmd.allow",
                 details: {
+                    requestId: "req-1",
                     command: "timeout 30s pnpm test",
                     innerCommand: "pnpm test",
                 },
@@ -211,6 +212,7 @@ describe("authorizeInnerCommand — recognized wrapper verdicts", () => {
                 level: "review",
                 event: "inner_cmd.deny",
                 details: {
+                    requestId: "req-1",
                     command: "timeout 30s rm -rf /",
                     innerCommand: "rm -rf /",
                 },
@@ -547,6 +549,7 @@ describe("authorizeInnerCommand — scaffolded commands", () => {
                 level: "review",
                 event: "inner_cmd.allow",
                 details: {
+                    requestId: "req-1",
                     command: full,
                     innerCommand: "pnpm install --frozen-lockfile",
                 },