fix: improve permission detail extraction and tool UI formatting

[rien7]

Summary

• enrich ACP local permission payloads with structured tool arguments
• make Discord permission cards robust to varied argument shapes (json string, nested input, key/value pairs)
• render tool status updates as plain text code blocks across Discord/Telegram/router for consistent readability
• add/extend regression tests for permission prompt and Discord sink behavior
• add whitelist management support with prefix-scoped allow rules

Notes

• this branch also updates ignore rules for local runtime artifacts

[ly1ex]

LGTM