feat: 组合包配置以包内 config/ 为唯一来源，并新增受保护写入人工审批

配置统一：权限策略、硬防御、Tool Search、提示词封面以及新迁入的
RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展
直接读取已安装组合包内的 config/，pi install / pi update 即完成部署；
删除 rebuild-bundle-config.mjs 与 bundle-manifest.json，my-pi/ 只保留
日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本
reset 回发布版本。AGENTS.md 新增「组合包配置原则」。

脚本整合：search_config.sh / ssh_config.sh 合并为 configure.sh
search|ssh；install.sh / update.sh 共享函数抽到 scripts/lib.sh，远程
安装器改为先下载到临时文件再执行，下载失败可被检测。

权限：hard-guards 新增 protectedWrites，写入 Pi 凭据/设置、已安装
组合包与扩展目录、pi-ssh 凭据库时一律人工确认（跳过 AutoReview、
yolo 与 Session grant，无 UI 时拒绝）；放行 ls、LSP 查询、ctx 只读、
web_search、Chrome 只读与 git 只读命令，skill_manage 改为 ask。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

extensions/permission-system.ts

@@ -4,9 +4,9 @@ import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 /**
  * Load the bundled permission system directly.
  *
- * Its bundle-owned config (policy.jsonc, hard-guards.jsonc) is deployed by
- * install.sh / update.sh into `<agentDir>/my-pi/permission-system/`; the
- * extension itself never seeds or migrates configuration.
+ * Its bundle-owned config (pi-permission-policy.jsonc, pi-permission-hard-guards.jsonc)
+ * is read directly from the installed bundle's `config/` directory; the
+ * extension itself never seeds, deploys, or migrates configuration.
  */
 export default function bundledPermissionSystemExtension(pi: ExtensionAPI): void {
   permissionSystemExtension(pi);

extensions/system-prompt-cover-config.ts

@@ -1,7 +1,7 @@
 import { readFileSync } from "node:fs";
-import { join } from "node:path";
+import { fileURLToPath } from "node:url";
 
-/** File name of the bundle-managed system prompt cover inside `<agentDir>/my-pi/`. */
+/** File name of the bundle-managed system prompt cover inside the bundle's `config/` directory. */
 export const COVER_FILE_NAME = "system-prompt-cover.md";
 
 /**
@@ -14,9 +14,12 @@ export const COVER_FILE_NAME = "system-prompt-cover.md";
  */
 const FIRST_SECTION_BOUNDARY = /\n<[a-z][a-z0-9_-]*>\n/;
 
-/** Resolve the cover path inside a given agent directory's bundle-owned `my-pi/` tree. */
-export function resolveCoverPath(agentDir: string): string {
-	return join(agentDir, "my-pi", COVER_FILE_NAME);
+/**
+ * Resolve the cover path inside the installed bundle's `config/` directory —
+ * the single source of truth, read directly at runtime with no deployment step.
+ */
+export function resolveCoverPath(): string {
+	return fileURLToPath(new URL(`../config/${COVER_FILE_NAME}`, import.meta.url));
 }
 
 /**

extensions/system-prompt-cover.ts

@@ -1,4 +1,4 @@
-import { getAgentDir, type ExtensionAPI } from "@earendil-works/pi-coding-agent";
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 
 import { readCoverFile, resolveCoverPath, spliceCover } from "./system-prompt-cover-config.ts";
 
@@ -19,7 +19,7 @@ export { COVER_FILE_NAME, readCoverFile, resolveCoverPath, spliceCover } from ".
  */
 export default function systemPromptCoverExtension(pi: ExtensionAPI): void {
 	pi.on("before_agent_start", (event) => {
-		const cover = readCoverFile(resolveCoverPath(getAgentDir()));
+		const cover = readCoverFile(resolveCoverPath());
 		if (cover === undefined) {
 			return;
 		}