feat: 组合包配置以包内 config/ 为唯一来源，并新增受保护写入人工审批

配置统一：权限策略、硬防御、Tool Search、提示词封面以及新迁入的
RTK、pi-compaction、pi-worktree、pi-hermes-memory 配置全部由扩展
直接读取已安装组合包内的 config/，pi install / pi update 即完成部署；
删除 rebuild-bundle-config.mjs 与 bundle-manifest.json，my-pi/ 只保留
日志与缓存。update.sh 成功升级后将默认 git 来源的已安装副本
reset 回发布版本。AGENTS.md 新增「组合包配置原则」。

脚本整合：search_config.sh / ssh_config.sh 合并为 configure.sh
search|ssh；install.sh / update.sh 共享函数抽到 scripts/lib.sh，远程
安装器改为先下载到临时文件再执行，下载失败可被检测。

权限：hard-guards 新增 protectedWrites，写入 Pi 凭据/设置、已安装
组合包与扩展目录、pi-ssh 凭据库时一律人工确认（跳过 AutoReview、
yolo 与 Session grant，无 UI 时拒绝）；放行 ls、LSP 查询、ctx 只读、
web_search、Chrome 只读与 git 只读命令，skill_manage 改为 ask。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

pi-ssh/README.md

@@ -28,8 +28,8 @@ ProxyJump and ProxyCommand are intentionally rejected in the first ssh2 release.
 From the installed bundle or this repository:
 
 ```sh
-./ssh_config.sh import
-./ssh_config.sh import packaging-server
+./configure.sh ssh import
+./configure.sh ssh import packaging-server
 ```
 
 The helper:
@@ -46,10 +46,10 @@ The helper:
 Other commands:
 
 ```sh
-./ssh_config.sh list
-./ssh_config.sh update packaging-server
-./ssh_config.sh remove packaging-server
-./ssh_config.sh rotate-key
+./configure.sh ssh list
+./configure.sh ssh update packaging-server
+./configure.sh ssh remove packaging-server
+./configure.sh ssh rotate-key
 ```
 
 Secret prompts require an interactive terminal. Passwords and passphrases are never passed as command-line arguments.

pi-ssh/extension-spec.md

@@ -20,7 +20,7 @@ The extension is for operating servers from local projects, not for replacing Pi
 Runtime communication uses Node `ssh2` only. OpenSSH is not spawned during Pi sessions. A user must explicitly import a concrete OpenSSH alias before connecting:
 
 ```text
-ssh_config.sh import <alias>
+configure.sh ssh import <alias>
   → ssh -G <alias>
   → user chooses private-key or password auth
   → ssh2 obtains host key, user confirms fingerprint

pi-ssh/scripts/ssh-config.mjs

@@ -184,7 +184,7 @@ async function main() {
   }
   if (command === "remove") {
     const id = arguments_[0];
-    if (!id) throw new Error("usage: ssh_config.sh remove <host-id>");
+    if (!id) throw new Error("usage: configure.sh ssh remove <host-id>");
     const config = loadVaultOrEmpty();
     if (!config.hosts[id]) throw new Error(`unknown pi-ssh host: ${id}`);
     delete config.hosts[id];
@@ -194,11 +194,11 @@ async function main() {
     return;
   }
   if (command !== "import" && command !== "update") {
-    throw new Error("usage: ssh_config.sh [list|import [alias...]|update <alias>|remove <id>|rotate-key]");
+    throw new Error("usage: configure.sh ssh [list|import [alias...]|update <alias>|remove <id>|rotate-key]");
   }
   const config = loadVaultOrEmpty();
   const aliases = command === "update"
-    ? [arguments_[0] || (() => { throw new Error("usage: ssh_config.sh update <alias>"); })()]
+    ? [arguments_[0] || (() => { throw new Error("usage: configure.sh ssh update <alias>"); })()]
     : await chooseAliases(arguments_);
   for (const alias of aliases) await importHost(config, alias);
   saveVault(config);

pi-ssh/src/agent-connection.ts

@@ -40,7 +40,7 @@ export function getConfiguredHost(config: PiSshConfig, hostId: string): SshHostC
   if (host) return host;
   const hostIds = Object.keys(config.hosts).sort();
   if (hostIds.length === 0) {
-    throw new Error(`unknown pi-ssh host '${hostId}'; no hosts are imported; run ssh_config.sh import <alias>`);
+    throw new Error(`unknown pi-ssh host '${hostId}'; no hosts are imported; run configure.sh ssh import <alias>`);
   }
   const shown = hostIds.slice(0, 10);
   const remaining = hostIds.length - shown.length;

pi-ssh/src/vault.ts

@@ -52,7 +52,7 @@ function parseKey(text: string): Buffer {
 }
 
 function readKey(paths: VaultPaths): Buffer {
-  if (!existsSync(paths.key)) throw new Error("pi-ssh vault key is missing; run ssh_config.sh import");
+  if (!existsSync(paths.key)) throw new Error("pi-ssh vault key is missing; run configure.sh ssh import");
   assertOwnerOnly(paths.key);
   return parseKey(readFileSync(paths.key, "utf8"));
 }
@@ -123,7 +123,7 @@ export function decryptConfig(encrypted: string, key: Buffer): PiSshConfig {
 
 export function loadVault(paths: VaultPaths = resolveVaultPaths()): PiSshConfig {
   if (!existsSync(paths.encryptedConfig)) {
-    throw new Error("pi-ssh is not configured; run ssh_config.sh import");
+    throw new Error("pi-ssh is not configured; run configure.sh ssh import");
   }
   assertOwnerOnly(paths.encryptedConfig);
   const key = readKey(paths);

pi-ssh/test/config-cli.test.ts

@@ -25,7 +25,7 @@ test("the configuration CLI lists hosts without revealing credentials", () => {
   const home = mkdtempSync(join(tmpdir(), "pi-ssh-cli-"));
   const configHome = join(home, "config");
   saveVault(fixture, resolveVaultPaths({ XDG_CONFIG_HOME: configHome }, process.platform, home));
-  const result = spawnSync(resolve("../ssh_config.sh"), ["list"], {
+  const result = spawnSync(resolve("../configure.sh"), ["ssh", "list"], {
     encoding: "utf8",
     env: { ...process.env, HOME: home, XDG_CONFIG_HOME: configHome },
   });