feat: add lsp and auto-permissions stack

config/pi-auto-permissions.json

@@ -0,0 +1,27 @@
+{
+  "enabled": true,
+  "reviewEvidence": {
+    "projectInstructions": true
+  },
+  "ui": {
+    "enabled": true,
+    "resultDisplayMs": 2500,
+    "placement": "widget"
+  },
+  "rules": [
+    {
+      "pattern": "\\bgit\\s+(?!(?:status|diff|log|show|rev-parse|ls-files|grep)\\b)(?!branch(?:\\s+--show-current[^\\r\\n;&|]*)?\\s*(?:$|[;&|]))(?!remote\\s+(?:-v|get-url)\\b)",
+      "flags": "i",
+      "level": "guarded",
+      "group": "git",
+      "label": "Git mutation or network operation"
+    },
+    {
+      "pattern": "(?:^|[\\n;&|])\\s*(?:(?:npm|pnpm|bun)\\s+(?:install|add|uninstall|update)\\b|pip3?\\s+install\\b|brew\\s+(?:install|uninstall)\\b)",
+      "flags": "i",
+      "level": "guarded",
+      "group": "packages",
+      "label": "Package installation or removal"
+    }
+  ]
+}