feat(cua-driver): make permission adapter inventory mode-aware

[f-trycua]

Summary

Adds the machine-readable, mode-aware enforcement inventory required by #2385. The same descriptors now drive authorization status and tools/list, including exact operation selectors, scope keys, mode-specific state, grant/indicator requirements, revocation triggers, and stable refusal codes. Compound calls can resolve multiple adapters, and unknown or unreviewed operations continue to fail closed.

Security contract

• active, metadata_only, and not_exposed are explicit per mode.
• Existing-profile attachment remains the only active adapter in this slice.
• Observation, input, file, and consequential adapters remain metadata-only until their provider, indicator, Stop, bypass, and platform evidence land.
• Low-level input does not claim purchase/send/delete semantics.

Verification

• 33 focused authorization/inventory tests pass locally.
• Exact registry/alias/variant coverage is asserted from the shared inventory.
• Full CI and stacked exact-SHA evidence will be completed before this PR is marked ready.

Stacked on #2575. Progresses #2385.