feat(permissions): voie projection CLI (LP0→LP3) + checkpoint Codex/input

Jalon vert regroupant deux chantiers entrelacés dans le working tree,
indissociables au niveau fichier mais tous deux verts (cargo test
--workspace + tests frontend permissions au vert).

Permissions — voie « projection CLI » (advisory), complète :
- LP0 domaine pur : modèle PermissionSet/EffectivePermissions, resolve
  deny-wins + postures Allow<Ask<Deny (crates/domain/src/permission.rs).
- LP1 store : FsPermissionStore (.ideai/permissions.json).
- LP2 use cases : Get/Update project, Update agent override, Resolve.
- LP3 projecteurs Claude/Codex (settings.local.json / config.toml),
  câblage launch-path + PermissionProjectorRegistry, nettoyage des
  fichiers Replace orphelins au swap de profil (LP3-4), composition root
  + commandes Tauri, UI PermissionsPanel (projet + override agent).
- ports.rs : PermissionStore + FileSystem::remove_file (cleanup au swap).

Reste ouvert (hors scope, marqué dans le code) : LP4 enforcement OS
airtight (Landlock fichiers) + résumé de permissions injecté.

Inclut aussi le chantier Codex/input/sessions structurées en cours
(McpConfigStrategy, StructuredAdapter, gestion d'input) partageant les
mêmes fichiers (lifecycle.rs, commands.rs, dto.rs, state.rs).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

frontend/src/features/projects/ProjectsView.tsx

@@ -37,6 +37,7 @@ import { TemplatesPanel } from "@/features/templates";
 import { SkillsPanel } from "@/features/skills";
 import { MemoryPanel } from "@/features/memory";
 import { EmbedderSettings } from "@/features/embedder";
+import { PermissionsPanel } from "@/features/permissions";
 import { GitPanel, GitGraphView } from "@/features/git";
 import { Button, Input, Panel, Tabs, cn } from "@/shared";
 import { useGateways } from "@/app/di";
@@ -49,6 +50,7 @@ type SidebarTab =
   | "agents"
   | "templates"
   | "skills"
+  | "permissions"
   | "memory"
   | "git";
 
@@ -58,6 +60,7 @@ const SIDEBAR_TABS: { id: SidebarTab; label: string }[] = [
   { id: "agents", label: "Agents" },
   { id: "templates", label: "Templates" },
   { id: "skills", label: "Skills" },
+  { id: "permissions", label: "Perms" },
   { id: "memory", label: "Memory" },
   { id: "git", label: "Git" },
 ];
@@ -289,6 +292,14 @@ export function ProjectsView() {
               <p className="text-sm text-muted">Open a project to manage skills.</p>
             )}
 
+            {/* Permissions panel */}
+            {sidebarTab === "permissions" && active && (
+              <PermissionsPanel projectId={active.id} />
+            )}
+            {sidebarTab === "permissions" && !active && (
+              <p className="text-sm text-muted">Open a project to manage permissions.</p>
+            )}
+
             {/* Memory panel + embedder settings */}
             {sidebarTab === "memory" && active && (
               <div className="flex flex-col gap-4">