fix: package bridge turn fence

Harden reconnect-safe Agent runtime

harden durable prompt relay and sensitive read approvals

Add Pi approval policy gate

init pinned pi sandbox runtime

initial commit