feat(hooks): add PermissionRequest hook

[AresNing]

Summary

• add a dedicated PermissionRequest hook event for real tool approval prompts
• include tool match support plus subject in the hook payload
• keep plan approvals, policy allow/session grants, and YOLO/auto approvals from firing the hook

Validation

• go test ./internal/hook ./internal/control ./internal/cli ./internal/boot ./internal/permission ./internal/agent
• go test ./...

Closes #3661

[SivanCola]

Thanks, this is directionally right for #3661. I prepared the rebase/fix locally, but this branch has maintainer edits disabled, so I cannot push directly to AresNing:feat/permission-request-hook.

Please either enable maintainer edits or rebase onto the latest main-v2 and apply these fixes:

• Keep both the current jobs tests/import and the new PermissionRequest tests when resolving internal/control/controller_test.go.
• Update the session-grant test to use the current SessionGrantRuleForScope(tool, subject) API.
• Pass nil tool args to the remaining requestApproval(..., "remember"/"forget", "") calls in internal/control/yolo_test.go.
• Add an explicit auto-approval-mode regression that uses ToolApprovalAuto through c.newInteractiveGate() and verifies PermissionRequest does not fire when the approval prompt is bypassed.

I verified the prepared fix with:

• go test ./internal/hook ./internal/control ./internal/cli ./internal/boot ./internal/permission ./internal/agent
• go test ./...

Once this is rebased and CI stays green, I will consider merging it into main-v2.

[SivanCola]

Follow-up: I opened #4319 as a maintainer integration PR that brings this PermissionRequest hook work onto the latest main-v2, keeps @AresNing credited as the primary author of the original implementation, adds the explicit auto-approval regression, and also includes the related move_file approval-flow fix for #4310.