Add PermissionGate — capability-tier model (T0-T6) per Sovereign Hive spec, audit log with severity flagging, permissive() for test code

d5f7354

verified

mxguru1 commited on 22 days ago