feat: 组合包配置以包内 config/ 为唯一来源，并新增受保护写入人工审批

配置统一：权限策略、硬防御、Tool Search、提示词封面以及新迁入的
RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展
直接读取已安装组合包内的 config/，pi install / pi update 即完成部署；
删除 rebuild-bundle-config.mjs 与 bundle-manifest.json，my-pi/ 只保留
日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本
reset 回发布版本。AGENTS.md 新增「组合包配置原则」。

脚本整合：search_config.sh / ssh_config.sh 合并为 configure.sh
search|ssh；install.sh / update.sh 共享函数抽到 scripts/lib.sh，远程
安装器改为先下载到临时文件再执行，下载失败可被检测。

权限：hard-guards 新增 protectedWrites，写入 Pi 凭据/设置、已安装
组合包与扩展目录、pi-ssh 凭据库时一律人工确认（跳过 AutoReview、
yolo 与 Session grant，无 UI 时拒绝）；放行 ls、LSP 查询、ctx 只读、
web_search、Chrome 只读与 git 只读命令，skill_manage 改为 ask。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

pi-permission-system/src/authority/permission-prompt-decision.ts

@@ -30,6 +30,21 @@ const OPTION_VERBS: Record<PromptKey, string> = {
   r: "deny with a reason",
 };
 
+/**
+ * The keys this prompt offers: `OPTION_ORDER` minus `s` when
+ * {@link PromptModelConfig.hideSessionOption} suppresses the session grant
+ * (a protected-write ask must be confirmed every time). Shared by the
+ * reducer and the component renderer so the two never disagree about which
+ * options exist.
+ */
+export function enabledPromptKeys(
+  config: PromptModelConfig,
+): readonly PromptKey[] {
+  return config.hideSessionOption
+    ? OPTION_ORDER.filter((key) => key !== "s")
+    : OPTION_ORDER;
+}
+
 /** Static configuration for a single prompt presentation. */
 export interface PromptModelConfig {
   /** When true, a letter hotkey arms first and commits only on a second press. */
@@ -42,6 +57,11 @@ export interface PromptModelConfig {
    * default) or the whole serving session.
    */
   sessionScope?: NonNullable<RequestPermissionOptions["sessionScope"]>;
+  /**
+   * Protected-write asks only: suppress the `s` option entirely — a
+   * human-only write must be confirmed every time.
+   */
+  hideSessionOption?: boolean;
 }
 
 /** The re-render view state the component draws from. */
@@ -116,11 +136,18 @@ function reduceDecisionStep(
     case "nav":
       return render({
         ...state,
-        highlightedKey: shiftKey(state.highlightedKey, event.direction),
+        highlightedKey: shiftKey(
+          state.highlightedKey,
+          event.direction,
+          enabledPromptKeys(config),
+        ),
         armedKey: undefined,
         hint: "",
       });
     case "hotkey":
+      if (!enabledPromptKeys(config).includes(event.key)) {
+        return render(state);
+      }
       return pressHotkey(config, state, event.key);
     case "confirm":
       return commit(config, state, state.highlightedKey);
@@ -245,11 +272,16 @@ function reduceScopeStep(
   }
 }
 
-function shiftKey(current: PromptKey, direction: "up" | "down"): PromptKey {
-  const index = OPTION_ORDER.indexOf(current);
+function shiftKey(
+  current: PromptKey,
+  direction: "up" | "down",
+  keys: readonly PromptKey[],
+): PromptKey {
+  const index = keys.indexOf(current);
+  if (index === -1) return keys[0] ?? current;
   const delta = direction === "down" ? 1 : -1;
-  const next = (index + delta + OPTION_ORDER.length) % OPTION_ORDER.length;
-  return OPTION_ORDER[next] ?? current;
+  const next = (index + delta + keys.length) % keys.length;
+  return keys[next] ?? current;
 }
 
 function render(state: PromptViewState): PromptOutcome {