feat(runtime): configure provider permission modes

[trhinehart-attentive]

Summary

• add runner-owned permission settings for Codex and Claude Code
• pass the settings through foreground bridges and managed runner services
• validate provider values while keeping the existing defaults
• prevent session environment data from overriding the policy through the reserved AMA_ prefix

The new variables are:

• AMA_CODEX_SANDBOX_MODE
• AMA_CODEX_APPROVAL_POLICY
• AMA_CLAUDE_CODE_PERMISSION_MODE

Claude Code receives allowDangerouslySkipPermissions only when its permission mode is bypassPermissions.

Closes #125

Testing

• pnpm typecheck
• pnpm lint
• pnpm lint:spec
• provider tests: 29 passed
• full Vitest run: 1,980 passed and 1 skipped; one unrelated local failure because oapi-codegen is not installed

The local machine does not have a Go toolchain, so CI will run the Go formatting and test checks.

[realmroot]

Completed through #136 because the upstream GitHub App could not push supplemental commits to this fork branch. #136 preserved this contribution, added the required bundle/security/documentation fixes, passed the full CI matrix, and merged it into main.

---

_{🤖 Created by Jarvis via Realmroot}