fix(deps): adapt to pi-permission-system 32 session-keyed services

- resolve the permissions service by the live session id in both
  tryRegister paths, so a mid-session republish re-keys via the re-emitted
  permissions:ready channel
- read the session probe instead of the start-time snapshot for inner-cmd
- pass the session key to publish/unpublishPermissionsService in tests and
  drop the removed PromptPermissionDetails.message field
- raise the ai-judge peer floor to @gotgenes/pi-permission-system >=32.0.0
- bump dev deps: pi-coding-agent 0.85.1, vitest 5, typescript 7

packages/pi-permission-ai-judge/package.json

@@ -14,17 +14,17 @@
   "peerDependencies": {
     "@earendil-works/pi-ai": "*",
     "@earendil-works/pi-coding-agent": "*",
-    "@gotgenes/pi-permission-system": ">=25.4.0"
+    "@gotgenes/pi-permission-system": ">=32.0.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "*",
-    "@earendil-works/pi-coding-agent": "*",
-    "@gotgenes/pi-permission-system": ">=25.4.0",
-    "@types/node": "^26.0.0",
-    "@vitest/coverage-istanbul": "3.2.7",
-    "@vitest/coverage-v8": "^3.2.7",
-    "typescript": "^5",
-    "vitest": "^3"
+    "@earendil-works/pi-ai": "^0.85.1",
+    "@earendil-works/pi-coding-agent": "^0.85.1",
+    "@gotgenes/pi-permission-system": "^32.0.2",
+    "@types/node": "^26.5.1",
+    "@vitest/coverage-istanbul": "5.0.1",
+    "@vitest/coverage-v8": "^5.0.1",
+    "typescript": "^7.0.2",
+    "vitest": "^5.0.1"
   },
   "scripts": {
     "check": "tsc --noEmit",