feat(security): add /elevate command and audit events

src/tools/policy.ts

@@ -157,6 +157,13 @@ export interface ToolPolicyContext {
 
   /** True when untrusted content has been introduced in this run. */
   untrustedContent?: boolean;
+
+  /** Elevated mode (break-glass): allow host execution for high-risk tools until this epoch millis. */
+  elevatedHostUntilMs?: number;
+  /** User-supplied reason for elevation (audited separately). */
+  elevatedHostReason?: string;
+  /** Correlation id for elevation window. */
+  elevatedHostId?: string;
 }
 
 function resolveSkillAllowedNames(allToolNames: string[], permissions?: SkillPermissions): Set<string> | null {