fix(skills): drop the per-skill permissions keys — the field does not exist in SkillSchema (objectstack#3820) (#511)

All six skills declared `permissions: ['crm:…']`. SkillSchema has no such
field, so Zod strips the key at parse time: it granted and restricted
nothing while reading as a security control — the ADR-0049 prohibited
shape, flagged in objectstack#3820 §4. Access to AI capability is gated at
the agent level (`agent.access`/`agent.permissions`, enforced at the chat
route) and by each tool's own authz; the spec now documents this on
SkillSchema itself (objectstack#3871).

typecheck, `objectstack validate`, and the test suite (67) all pass.


Claude-Session: https://claude.ai/code/session_01BHjroNkLkajskKbJaidko4

Co-authored-by: Claude <noreply@anthropic.com>

Author: os-zhuang

src/skills/case-triage.skill.ts

@@ -27,6 +27,4 @@ classify a case:
   triggerConditions: [
     { field: 'objectName', operator: 'eq', value: 'crm_case' },
   ],
-
-  permissions: ['crm:case:write'],
 });

src/skills/customer-360.skill.ts

@@ -24,6 +24,4 @@ customer / account / contact:
     'give me the full picture',
     'account summary',
   ],
-
-  permissions: ['crm:account:read'],
 });

src/skills/email-drafting.skill.ts

@@ -25,6 +25,4 @@ export const EmailDraftingSkill = defineSkill({
     'optimise subject line',
     'email template',
   ],
-
-  permissions: ['crm:email:write'],
 });

src/skills/lead-qualification.skill.ts

@@ -36,6 +36,4 @@ export const LeadQualificationSkill = defineSkill({
   triggerConditions: [
     { field: 'objectName', operator: 'eq', value: 'crm_lead' },
   ],
-
-  permissions: ['crm:lead:read'],
 });

src/skills/live-data.skill.ts

@@ -52,6 +52,4 @@ record (account, contact, lead, opportunity, case, quote, etc.):
     'pipeline',
     'forecast',
   ],
-
-  permissions: ['crm:read'],
 });

src/skills/revenue-forecasting.skill.ts

@@ -30,6 +30,4 @@ risk, or deal slippage:
   triggerConditions: [
     { field: 'objectName', operator: 'in', value: ['crm_opportunity', 'dashboard'] },
   ],
-
-  permissions: ['crm:opportunity:read'],
 });