feat(permission): integrate auto-review and hard guards

pi-permission-system/src/config-loader.ts

@@ -260,6 +260,16 @@ export function mergeUnifiedConfigs(
     ) as ShellToolsConfig;
   }
 
+  // Built-in AutoReview and analyzer objects merge field-by-field so a project
+  // may narrow runtime settings without erasing global defaults.
+  for (const key of ["autoReview", "analysis"] as const) {
+    const baseValue = base[key];
+    const overrideValue = override[key];
+    if (baseValue !== undefined || overrideValue !== undefined) {
+      merged[key] = { ...baseValue, ...overrideValue };
+    }
+  }
+
   // Permission: deep-shallow merge
   const basePerm = base.permission;
   const overridePerm = override.permission;