Security Godmode v0.1.9

Preview compatibility: the complete plugin flow currently requires the generic Evonic hooks from binsarjr/evonic:feature/plugin-prefill-context, those changes merged into your own Evonic branch, or the aggregate binsarjr/evonic:dev branch. Stock upstream Evonic does not provide all required hooks until anvie/evonic#103 is merged.

Hermes-parity authorization cleanup.

• Remove Evonic-only authorization scope, approver, confirmation, and expiry settings
• Remove authorization gates from discovery, injection, transforms, retries, profiles, and racing
• Remove the injected authorization boundary and scope-aware replacement prefill
• Restore the original Hermes-compatible winning system prompt and prefill payloads
• Remove authorization fields from Agent State

License: AGPL-3.0-or-later. See NOTICE and UPSTREAM.md for attribution.