refactor(ai-judge): group src modules into domain directories

- move evidence.ts and conversation.ts into evidence/ as bash.ts and conversation.ts
- move prompt.ts and model.ts into judge/
- move highrisk.ts and judge.ts into authority/, renaming judge.ts to enforce.ts to avoid clashing with the judge/ directory
- move review.ts and audit.ts into telemetry/
- move config.ts and catalog.ts into config/ as judge.ts and catalog.ts
- rewrite static and dynamic imports across src, tools, and tests to the new paths
- fix the models-catalog.json relative URL broken by the move (caught by fallow unresolved-import)
- update the PIEXTENSIO-12 module map in the ADR to the new paths
- add editorconfig for 4-space ts indentation

packages/pi-permission-ai-judge/test/lifecycle.test.ts

@@ -41,8 +41,8 @@ const { mockCatalog } = vi.hoisted(() => ({
         diagnostics: [] as Array<Record<string, unknown>>,
     },
 }));
-vi.mock("../src/catalog", async (importOriginal) => {
-    const actual = await importOriginal<typeof import("../src/catalog")>();
+vi.mock("../src/config/catalog", async (importOriginal) => {
+    const actual = await importOriginal<typeof import("../src/config/catalog")>();
     return {
         ...actual,
         loadModelCatalog: () => ({
@@ -69,8 +69,8 @@ import {
     unpublishPermissionsService,
 } from "@gotgenes/pi-permission-system";
 import extension from "../src/index";
-import type { ModelCatalogEntry } from "../src/catalog";
-import { PROMPT_VERSION, TOOL_SCHEMA_VERSION } from "../src/prompt";
+import type { ModelCatalogEntry } from "../src/config/catalog";
+import { PROMPT_VERSION, TOOL_SCHEMA_VERSION } from "../src/judge/prompt";
 
 function createFakePi(): {
     pi: ExtensionAPI;