add per-agent permission-mode badge to the cockpit roster

Each roster row shows a D/A/P mode badge reflecting the session's live
permission mode. Click cycles the safe trio default -> acceptEdits ->
plan and sends a set_permission_mode control_request to that session
(mirrors interrupt(); fire-and-forget). bypassPermissions is a footgun,
so it is reachable only on Shift-click and behind an inline confirm. A
clide.agent.set-permission-mode command gives the CLI parity.

T-181.

Co-Authored-By: Claude <noreply@anthropic.com>

CHANGELOG.md

@@ -68,6 +68,10 @@ heading, and (b) bumping `pubspec.yaml` `version:` in the same commit.
   clide-managed agents: show/hide, mute, close, and inject-a-message per
   roster row, plus a live shared task list with reassign. Each action has a
   matching `clide` command (D-6 parity). (T-171, D-77)
+- Per-agent permission-mode badge in the cockpit roster — click cycles the
+  safe trio default → acceptEdits → plan and sends `set_permission_mode` to
+  that session; Shift-click reaches `bypassPermissions` behind a confirm.
+  The badge reflects the live mode. (T-181, D-77)
 - Team coordination broker (T-170, D-77) — clide hosts an in-process MCP
   server (`clide-team`) for managed sessions over the stream-json control
   channel, giving agents tools to message each other, broadcast, see the