feat: add permission modes and CLI orchestration layer

Permission Modes:
- Add default/plan/auto_accept modes controlling tool access
- Plan mode restricts Task agent to read-only tools only
- Auto-accept mode bypasses approval prompts (with confirmation)

Approval Scaffolding:
- Add ApprovalRule/ApprovalRuleSet for granular tool control
- Pattern-based matching on tool name and arguments
- Default rules for common safe/dangerous patterns
- Prep for future bidirectional approval flow

CLI Refactor:
- Default to Task agent (main orchestrator)
- Add --mode flag and runtime mode switching
- Integrate prompt_toolkit for better UX:
  - Persistent command history (~/.webber_history)
  - Tab completion for commands and file paths
  - Auto-suggest from history
- Deprecate standalone 'explore' command

Other:
- Split CHANGELOG.md into per-package files
- Update AGENTS.md release procedure for both packages

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

webber-cli/CHANGELOG.md

@@ -0,0 +1,21 @@
+# Changelog - Webber CLI
+
+All notable changes to the Webber CLI will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0] - 2026-01-10
+
+### Added
+- Initial CLI release as part of monorepo reorganization
+- Typer + Rich foundation with console theming
+- Commands:
+  - `webber-cli status` - Check API connection
+  - `webber-cli explore` - One-shot codebase exploration
+  - `webber-cli chat` - Interactive conversation mode
+- Streaming support with `--stream` flag (default: enabled)
+- Markdown rendering for agent responses
+- Configurable API URL via `WEBBER_API_URL` environment variable