fix(deps): adapt to pi-permission-system 32 session-keyed services

- resolve the permissions service by the live session id in both
  tryRegister paths, so a mid-session republish re-keys via the re-emitted
  permissions:ready channel
- read the session probe instead of the start-time snapshot for inner-cmd
- pass the session key to publish/unpublishPermissionsService in tests and
  drop the removed PromptPermissionDetails.message field
- raise the ai-judge peer floor to @gotgenes/pi-permission-system >=32.0.0
- bump dev deps: pi-coding-agent 0.85.1, vitest 5, typescript 7

package.json

@@ -10,7 +10,7 @@
   "type": "module",
   "private": true,
   "dependencies": {
-    "@gotgenes/pi-permission-system": "^25.4.0"
+    "@gotgenes/pi-permission-system": "^32.0.2"
   },
   "pi": {
     "extensions": [
@@ -18,6 +18,6 @@
     ]
   },
   "devDependencies": {
-    "fallow": "^3.17.0"
+    "fallow": "^3.25.0"
   }
 }