feat(claude): reach bypass via Ctrl/Cmd+Shift+M + shift-click (T-510)

Restores the original intent that T-226's refinement wording lost: the
shift modifier is the explicit opt-in for bypassPermissions, not a
separate confirm flow. Plain Ctrl/Cmd+M keeps cycling the safe trio;
Ctrl/Cmd+Shift+M cycles the full list. The composer menu's bypass row
was permanently disabled, deferring to "the cockpit's confirmed path" —
but that roster is ghost-fed (T-396), so bypass was unreachable from
the primary session's UI entirely. The row now no-ops on a plain click
(menu stays open) and selects on shift-click, with a hint naming the
gesture. Roster badge and /permissions paths unchanged.

lib/test_app.dart is a format-only follow-up to the previous commit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

lib/test_app.dart

@@ -284,7 +284,15 @@ class _ClideTestAppState extends State<ClideTestApp> {
 
       // PqlExtension precedes GraphExtension: the graph view depends on it
       // (activateAll resolves the order, but this documents the dependency).
-      final extensions = <ClideExtension>[DiffExtension(), FilesExtension(), GitExtension(), TerminalExtension(), PqlExtension(), GraphExtension(), CanvasExtension()];
+      final extensions = <ClideExtension>[
+        DiffExtension(),
+        FilesExtension(),
+        GitExtension(),
+        TerminalExtension(),
+        PqlExtension(),
+        GraphExtension(),
+        CanvasExtension(),
+      ];
 
       for (final ext in extensions) {
         try {