Feat v0.5.0 realtime primitive + dialog audit + permissions UI

Add realtime pub/sub: Starlark realtime.publish() module gated by
new realtime.publish permission, WS room protocol (room.subscribe/
room.unsubscribe intercepted in readPump with 100-room cap), and
SDK sw.realtime.subscribe() with auto room join/leave and reconnect
recovery.

Migrate 5 bare confirm() calls to sw.confirm() with destructive
styling in tasks, schedules, notes (×2), and editor packages.

Add admin permissions UI: per-permission grant/revoke drawer,
Grant All bulk action, pending_review/suspended status badges,
disabled enable toggle when pending. Closes v0.4.7 permissions
UI gap.

8 new Go tests, all passing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/notes/js/main.js

@@ -811,7 +811,7 @@
     }
 
     async function handleArchive() {
-      if (!note || !confirm('Archive this note?')) return;
+      if (!note || !await sw.confirm('Archive this note?', { destructive: true })) return;
       await api.del('/notes/' + note.id);
       onDelete();
     }
@@ -1717,7 +1717,7 @@
       } catch (e) { console.error('Rename folder failed:', e); }
     }
     async function handleDeleteFolder(folderId) {
-      if (!confirm('Delete this folder? Notes will be moved to Unfiled.')) return;
+      if (!await sw.confirm('Delete this folder? Notes will be moved to Unfiled.', { destructive: true })) return;
       try {
         await api.del('/folders/' + folderId);
         if (activeFolderId === folderId) setActiveFolderId(null);