fix(aab): strip rtk/time/timeout wrapper prefixes before git/github detection

[jpleva91]

Closes #1202

Implementation Summary

What changed:

• Added stripCommandWrappers(command) function to packages/kernel/src/aab.ts that strips known transparent tool wrapper prefixes (rtk, time, timeout N) before git/github action pattern matching
• Applied it in normalizeIntent so that rtk git push origin main is classified as git.push, not left as shell.exec
• Exported the function so it's testable and reusable
• Added 13 new tests: 7 for stripCommandWrappers unit behaviour and 6 for normalizeIntent with rtk/timeout-prefixed git/github commands

How to verify:

1. pnpm test --filter=@red-codes/kernel — 906 tests pass (up from 893)
2. normalizeIntent({ tool: 'Bash', command: 'rtk git push origin main' }) returns { action: 'git.push', branch: 'main' }
3. normalizeIntent({ tool: 'Bash', command: 'timeout 60 git merge feature' }) returns { action: 'git.merge' }

Scope note:
This addresses Gap A from #1202. Gap B (git worktree commands in compound pipelines) and Gap C (emit UnknownActionType WARNING event) are outside Tier C scope — both require changes to the command scanner architecture or event schema.

Tier C scope check:

• Files changed: 2 (limit: 5)
• Lines changed: ~97 (limit: 300)
• Breaking changes: None — purely additive, existing behaviour preserved

---

Tier C implementation by copilot-cli — AgentGuard three-tier governance