feat: 组合包配置以包内 config/ 为唯一来源，并新增受保护写入人工审批

配置统一：权限策略、硬防御、Tool Search、提示词封面以及新迁入的
RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展
直接读取已安装组合包内的 config/，pi install / pi update 即完成部署；
删除 rebuild-bundle-config.mjs 与 bundle-manifest.json，my-pi/ 只保留
日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本
reset 回发布版本。AGENTS.md 新增「组合包配置原则」。

脚本整合：search_config.sh / ssh_config.sh 合并为 configure.sh
search|ssh；install.sh / update.sh 共享函数抽到 scripts/lib.sh，远程
安装器改为先下载到临时文件再执行，下载失败可被检测。

权限：hard-guards 新增 protectedWrites，写入 Pi 凭据/设置、已安装
组合包与扩展目录、pi-ssh 凭据库时一律人工确认（跳过 AutoReview、
yolo 与 Session grant，无 UI 时拒绝）；放行 ls、LSP 查询、ctx 只读、
web_search、Chrome 只读与 git 只读命令，skill_manage 改为 ask。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

pi-permission-system/test/config-paths.test.ts

@@ -1,30 +1,35 @@
 import { join } from "node:path";
+import { fileURLToPath } from "node:url";
 import { describe, expect, it } from "vitest";
 
 import {
   getGlobalConfigPath,
   getGlobalLogsDir,
-  getLegacyGlobalPolicyPath,
+  getHardGuardConfigPath,
 } from "#src/config-paths";
 
+// Bundle-level `config/` is the single source of truth — two levels up from
+// both this test file and src/config-paths.ts.
+const BUNDLE_CONFIG_DIR = fileURLToPath(new URL("../../config", import.meta.url));
+
 describe("config-paths", () => {
   const agentDir = "/home/user/.pi/agent";
 
-  it("places the global policy at my-pi/permission-system/policy.jsonc under the agent dir", () => {
-    expect(getGlobalConfigPath(agentDir)).toBe(
-      join(agentDir, "my-pi", "permission-system", "policy.jsonc"),
+  it("reads the global policy from the bundle-level config directory", () => {
+    expect(getGlobalConfigPath()).toBe(
+      join(BUNDLE_CONFIG_DIR, "pi-permission-policy.jsonc"),
     );
   });
 
-  it("places logs next to the global config dir", () => {
+  it("reads hard guards from the bundle-level config directory", () => {
+    expect(getHardGuardConfigPath()).toBe(
+      join(BUNDLE_CONFIG_DIR, "pi-permission-hard-guards.jsonc"),
+    );
+  });
+
+  it("keeps logs under the disposable agent-dir my-pi tree", () => {
     expect(getGlobalLogsDir(agentDir)).toBe(
       join(agentDir, "my-pi", "permission-system", "logs"),
     );
   });
-
-  it("keeps the legacy global policy path for migration detection", () => {
-    expect(getLegacyGlobalPolicyPath(agentDir)).toBe(
-      join(agentDir, "pi-permissions.jsonc"),
-    );
-  });
 });