fix(pi): mount ai-judge through the root pi.extensions manifest

The project-local .pi/settings.json that mounted
../packages/pi-permission-ai-judge was removed in kyxsszlx, leaving
ai-bash-judge with no loader and the global authorizer chain with a
dangling link: inner-cmd loaded but no "Enforce active" notice appeared.

- add the ai-judge entry point next to inner-cmd in pi.extensions so
  the git package ships both authorizers
- rely on the loader's bundled aliases for @earendil-works/pi-ai
  (value-imported only for the Type schema helper) so no runtime
  dependency is needed

package.json

@@ -14,7 +14,8 @@
   },
   "pi": {
     "extensions": [
-      "./packages/pi-permission-inner-cmd/src/index.ts"
+      "./packages/pi-permission-inner-cmd/src/index.ts",
+      "./packages/pi-permission-ai-judge/src/index.ts"
     ]
   },
   "devDependencies": {