refactor(ai-judge): move models-catalog.json to package root

packages/pi-permission-ai-judge/README.md

@@ -55,7 +55,7 @@ pi install github.com/SikongJueluo/pi-extensions
 
 ## 推荐模型目录
 
-`src/models-catalog.json` 列出实测过的判官模型（测试时间、prompt/语料版本、匹配数、延迟分布），逐例报告在 `reports/`。"推荐"只代表兼容性实测通过，不是安全认证；目录外的模型仍可用于 enforce（不拦截），仅会话开始时提示未经测试。
+`models-catalog.json`（包根）列出实测过的判官模型（测试时间、prompt/语料版本、匹配数、延迟分布），逐例报告在 `reports/`。"推荐"只代表兼容性实测通过，不是安全认证；目录外的模型仍可用于 enforce（不拦截），仅会话开始时提示未经测试。
 
 ## 日志与工具
 

packages/pi-permission-ai-judge/src/catalog.ts

@@ -12,8 +12,9 @@ import { fileURLToPath } from "node:url";
  * testing means structured-output/quality/latency compatibility, not a
  * safety certification.
  *
- * The catalog is hand-maintained data (`models-catalog.json` beside this
+ * The catalog is hand-maintained data (`models-catalog.json` at the
- * module); no runtime code writes it. Anything unreadable, malformed, or
+ * package root, beside `reports/`); no runtime code writes it. Anything
+ * unreadable, malformed, or
  * of an unknown schema version — or any single invalid entry — degrades
  * to an empty catalog with a diagnostic: partial recovery would serve
  * unreviewed statuses from a file the owner has not validated, and
@@ -264,7 +265,7 @@ export function classifyModel(
     return "unlisted";
 }
 
-/** Package-local default catalog path (beside this module). */
+/** Package-root catalog path (data, not source; beside reports/). */
 export const DEFAULT_CATALOG_PATH: string = fileURLToPath(
-    new URL("./models-catalog.json", import.meta.url),
+    new URL("../models-catalog.json", import.meta.url),
 );