Inject the active permission mode into the runtime system prompt so plan/default/full-auto state is visible to the model.
Refresh the engine model, effort, permission checker, and system prompt when runtime-affecting slash commands update settings.
Based-on: #268