feat(web): project Pi trust state in snapshots

[seekskyworld]

Problem

Implements the snapshot portion of #343. Web clients could not distinguish the active workspace trust state before invoking operations.

Value

The browser can show whether the current workspace is trusted without owning or persisting a second permission policy.

Approach

Read Pi SettingsManager trust state through the Web runtime, map it to bounded trusted/untrusted/unknown values, and include it in the existing runtime snapshot projection. Unbound or unreadable state fails closed to unknown.

Validation

• npx tsc --noEmit
• node --test --experimental-strip-types tests/web/protocol.test.ts tests/web/pi-adapter.test.ts tests/web/pi-runtime.test.ts (44 passed)
• git diff --check

Impact

• User-visible behavior: snapshot consumers receive trust status for display.
• Model-visible context/tools: none.
• Runtime/lifecycle: reads Pi-owned trust state only.
• Persisted config/data: none.
• Compatibility/risk: optional controller field preserves existing test doubles; approval actions remain a separate follow-up.