Feat v0.5.0 realtime primitive + dialog audit + permissions UI

Add realtime pub/sub: Starlark realtime.publish() module gated by
new realtime.publish permission, WS room protocol (room.subscribe/
room.unsubscribe intercepted in readPump with 100-room cap), and
SDK sw.realtime.subscribe() with auto room join/leave and reconnect
recovery.

Migrate 5 bare confirm() calls to sw.confirm() with destructive
styling in tasks, schedules, notes (×2), and editor packages.

Add admin permissions UI: per-permission grant/revoke drawer,
Grant All bulk action, pending_review/suspended status badges,
disabled enable toggle when pending. Closes v0.4.7 permissions
UI gap.

8 new Go tests, all passing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/schedules/js/main.js

@@ -275,7 +275,7 @@
     }
 
     async function handleDelete(item) {
-      if (!confirm('Delete schedule "' + item.name + '"?')) return;
+      if (!await sw.confirm('Delete schedule "' + item.name + '"?', { destructive: true })) return;
       try {
         await apiDelete(item.id);
         sw.toast('Schedule deleted', 'success');