feat: vendor permission system source

pi-permission-system/test/helpers/decision-fixtures.ts

@@ -0,0 +1,13 @@
+import type { DecisionSource } from "#src/authority/decision-source";
+
+/**
+ * The decider a test stands in for when the decision's *provenance* is not its
+ * subject: a human answering the inline dialog, which is what a real
+ * `LocalUserAuthorizer` produces.
+ *
+ * A shared constant rather than a decision builder, so each fixture's literal
+ * still shows its own `approved`/`state` — in most of these tests that pair is
+ * the subject, and hiding it behind a factory would cost more than the
+ * duplication saves.
+ */
+export const DECIDED_BY_HUMAN: DecisionSource = { kind: "user", via: "dialog" };