refactor(ai-judge): group src modules into domain directories

- move evidence.ts and conversation.ts into evidence/ as bash.ts and conversation.ts
- move prompt.ts and model.ts into judge/
- move highrisk.ts and judge.ts into authority/, renaming judge.ts to enforce.ts to avoid clashing with the judge/ directory
- move review.ts and audit.ts into telemetry/
- move config.ts and catalog.ts into config/ as judge.ts and catalog.ts
- rewrite static and dynamic imports across src, tools, and tests to the new paths
- fix the models-catalog.json relative URL broken by the move (caught by fallow unresolved-import)
- update the PIEXTENSIO-12 module map in the ADR to the new paths
- add editorconfig for 4-space ts indentation

packages/pi-permission-ai-judge/test/prompt.test.ts

@@ -4,7 +4,7 @@ import {
     MAX_REASON_CODE_POINTS,
     PROMPT_VERSION,
     REPORT_VERDICT_TOOL_NAME,
-} from "../src/prompt";
+} from "../src/judge/prompt";
 import type { Context } from "@earendil-works/pi-ai";
 
 describe("buildJudgeContext", () => {