Add pluggable permission checkpoints for sensitive actions such as file mutation, shell execution, plugin operations, and provider/auth operations.

Acceptance criteria:

• Checkpoints can be requested before sensitive actions.
• Permission providers can allow, deny, or request user confirmation.
• Policy-driven behavior can be implemented as plugin behavior.
• Interactive approval behavior can be implemented through client/server events.
• Permission decisions are recorded in session history where relevant.