feat(pi-permission-ai-judge): add deferring authorizer extension

- add pnpm workspace scaffold with shared TypeScript config
- register an ai-bash-judge authorizer with pi-permission-system
- log permission request details and deterministic policy verdicts
- record review entries and defer to the next authorizer

.pi/settings.json

@@ -0,0 +1,5 @@
+{
+  "packages": [
+    "../packages/pi-permission-ai-judge"
+  ]
+}