Enhanced Permission Management

What changed: Permission checking and configuration validation now uses comprehensive Zod schemas for type safety and validation.

Details:

• Domain pattern validation with security constraints prevents overly broad network rules
• Filesystem restriction schemas ensure valid path specifications
• Ripgrep configuration validation
• Comprehensive sandbox config validation via c$Q schema system
• VqQ() function converts permissions to sandbox config format
• Network permission checking via M$Q() replaces the old CQQ() function
• Evidence: VqQ() for permission conversion, M$Q() for domain-based network checking, schema validation system c$Q