Feat v0.5.0 realtime primitive + dialog audit + permissions UI

Add realtime pub/sub: Starlark realtime.publish() module gated by
new realtime.publish permission, WS room protocol (room.subscribe/
room.unsubscribe intercepted in readPump with 100-room cap), and
SDK sw.realtime.subscribe() with auto room join/leave and reconnect
recovery.

Migrate 5 bare confirm() calls to sw.confirm() with destructive
styling in tasks, schedules, notes (×2), and editor packages.

Add admin permissions UI: per-permission grant/revoke drawer,
Grant All bulk action, pending_review/suspended status badges,
disabled enable toggle when pending. Closes v0.4.7 permissions
UI gap.

8 new Go tests, all passing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/models/models_extension_perm.go

@@ -35,6 +35,7 @@ const (
 	ExtPermWorkflowAccess       = "workflow.access"   // v0.30.2: workflow definition + stage data access
 	ExtPermConnectionsRead      = "connections.read"  // v0.38.1: extension connection resolution
 	ExtPermTriggersRegister     = "triggers.register" // v0.2.2: event/webhook trigger registration
+	ExtPermRealtimePublish      = "realtime.publish"  // v0.5.0: publish events to realtime channels
 )
 
 // ValidExtensionPermissions is the set of recognized permission keys.
@@ -48,6 +49,7 @@ var ValidExtensionPermissions = map[string]bool{
 	ExtPermWorkflowAccess:       true,
 	ExtPermConnectionsRead:      true,
 	ExtPermTriggersRegister:     true,
+	ExtPermRealtimePublish:      true,
 }
 
 // ── Extension Permission Model ───────────────