feat: 组合包配置以包内 config/ 为唯一来源，并新增受保护写入人工审批

配置统一：权限策略、硬防御、Tool Search、提示词封面以及新迁入的
RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展
直接读取已安装组合包内的 config/，pi install / pi update 即完成部署；
删除 rebuild-bundle-config.mjs 与 bundle-manifest.json，my-pi/ 只保留
日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本
reset 回发布版本。AGENTS.md 新增「组合包配置原则」。

脚本整合：search_config.sh / ssh_config.sh 合并为 configure.sh
search|ssh；install.sh / update.sh 共享函数抽到 scripts/lib.sh，远程
安装器改为先下载到临时文件再执行，下载失败可被检测。

权限：hard-guards 新增 protectedWrites，写入 Pi 凭据/设置、已安装
组合包与扩展目录、pi-ssh 凭据库时一律人工确认（跳过 AutoReview、
yolo 与 Session grant，无 UI 时拒绝）；放行 ls、LSP 查询、ctx 只读、
web_search、Chrome 只读与 git 只读命令，skill_manage 改为 ask。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

pi-compaction/README.md

@@ -17,40 +17,38 @@ Context Mode remains responsible for preventing large external data from enterin
 
 ## Configuration
 
-Set `piCompaction` in the Pi agent `settings.json`:
+Configuration lives in the installed bundle's `config/pi-compaction.json` (the bundle repository's `config/` directory is the single source of truth; `pi update` refreshes the installed copy). The extension never reads `settings.json` and never writes config at runtime:
 
 ```json
 {
-  "piCompaction": {
+  "enabled": true,
+  "softRatio": 0.72,
+  "hardRatio": 0.9,
+  "targetRatio": 0.55,
+  "deterministic": {
     "enabled": true,
-    "softRatio": 0.72,
-    "hardRatio": 0.9,
-    "targetRatio": 0.55,
-    "deterministic": {
-      "enabled": true,
-      "maxStubTokens": 256
-    },
-    "semantic": {
-      "enabled": true,
-      "model": "default",
-      "thinking": "low",
-      "concurrency": 1,
-      "minInputChars": 4000,
-      "maxInputChars": 24000,
-      "maxRetries": 2
-    },
-    "native": {
-      "enabled": true
-    }
+    "maxStubTokens": 1024
+  },
+  "semantic": {
+    "enabled": true,
+    "model": "default",
+    "thinking": "low",
+    "concurrency": 1,
+    "minInputChars": 4000,
+    "maxInputChars": 24000,
+    "maxRetries": 2
+  },
+  "native": {
+    "enabled": true
   }
 }
 ```
 
-The extension never writes settings. Invalid or missing fields are normalized in memory.
+Invalid or missing fields are normalized in memory.
 
 ## Native providers
 
-Native compaction is enabled by `piCompaction.native.enabled` and uses the model selected in the session when compaction starts. It does not select a separate summarization model.
+Native compaction is enabled by the `native.enabled` config key and uses the model selected in the session when compaction starts. It does not select a separate summarization model.
 
 | Provider | API | Native transport |
 | --- | --- | --- |