feat(pi-permission-ai-judge): add deferring authorizer extension

- add pnpm workspace scaffold with shared TypeScript config
- register an ai-bash-judge authorizer with pi-permission-system
- log permission request details and deterministic policy verdicts
- record review entries and defer to the next authorizer

packages/pi-permission-ai-judge/package.json

@@ -0,0 +1,30 @@
+{
+  "name": "@sikongjueluo/pi-permission-ai-judge",
+  "version": "0.0.1",
+  "type": "module",
+  "keywords": [
+    "pi-package",
+    "pi-extension"
+  ],
+  "pi": {
+    "extensions": [
+      "./src/index.ts"
+    ]
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-ai": "*",
+    "@earendil-works/pi-coding-agent": "*",
+    "@gotgenes/pi-permission-system": ">=20.10.0"
+  },
+  "devDependencies": {
+    "@earendil-works/pi-ai": "*",
+    "@earendil-works/pi-coding-agent": "*",
+    "@gotgenes/pi-permission-system": ">=20.10.0",
+    "typescript": "^5",
+    "vitest": "^3"
+  },
+  "scripts": {
+    "check": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}