refactor(monitoring): N2 - tach monitoring_tab.py, CanonicalAuditLogger, MonitoringQueryService, go circular import, sandbox matrix

- ui/monitoring_tab.py (1546 dong) tach thanh presentation/monitoring/**
  (container + 7 tab/card + shared helper), ui/monitoring_tab.py con lai
  re-export shim de app.py khong doi.
- infrastructure/telemetry/audit_logger.py: CanonicalAuditLogger, core/audit_log.py
  thanh wrapper mong, tuong thich nguoc 100% voi schema .jsonl cu.
- application/monitoring/monitoring_query_service.py: MonitoringQueryService
  read-only, filter/sort/pagination, khong import PySide6.
- Go circular import model_pricing<->usage_tracker va agent_security<->
  agent_security_alert (core/agent_security_types.py moi).
- infrastructure/sandbox/sandbox_capabilities.py: SandboxCapabilityMatrix
  theo OS (Windows/Linux/macOS), chua dau noi vao core/sandbox_manager.py.
- conftest.py: sua loi checkout khong ten cowork_local khien pytest import
  nham thu muc khac.
- 77 test moi, 167/167 pass. QA da xac nhan UI/business logic khong doi
  (xem evidence/report/unified_report.html).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

presentation/monitoring/tabs/security_settings_tab.py

@@ -0,0 +1,59 @@
+"""Permissions card — "what is the agent allowed to touch?", displayed
+nested inside the Sandbox Details card's expandable fold (see
+``sandbox_tab.SandboxDetailsCard``), exactly as in the pre-refactor
+``ui/monitoring_tab.py`` (``self._sbx_detail.layout().addWidget(self.ov_permissions_group)``).
+Editing still opens the same Settings dialog as the Sandbox card's own
+"Edit" button — this card only DISPLAYS ``ctx.config.agent_security``, it
+does not host its own settings-editing UI.
+"""
+from __future__ import annotations
+
+from typing import Callable
+
+from PySide6.QtCore import Qt
+from PySide6.QtWidgets import QGroupBox, QPushButton, QVBoxLayout
+
+from ....i18n import tr
+from ..shared.badges import apply_badge
+from ..shared.layout_helpers import kv_row
+from ..shared.open_settings import open_settings_and_notify
+
+
+class PermissionsCard(QGroupBox):
+    def __init__(self, ctx, on_settings_changed: Callable[[], None]):
+        super().__init__()
+        self._ctx = ctx
+        self._on_settings_changed = on_settings_changed
+        self.setObjectName("monSection")
+        perm_lay = QVBoxLayout(self)
+
+        self.fs_lbl, self.fs_val = kv_row(perm_lay)
+        self.network_lbl, self.network_val = kv_row(perm_lay)
+        self.process_lbl, self.process_val = kv_row(perm_lay)
+        self.env_lbl, self.env_val = kv_row(perm_lay)
+
+        self.edit_btn = QPushButton()
+        self.edit_btn.setFlat(True)
+        self.edit_btn.clicked.connect(self._open_settings)
+        perm_lay.addWidget(self.edit_btn, 0, Qt.AlignLeft)
+
+    def _open_settings(self) -> None:
+        open_settings_and_notify(self._ctx, self, self._on_settings_changed)
+
+    def retranslate(self) -> None:
+        self.setTitle(tr("monitoring.overview_permissions_title").upper())
+        self.fs_lbl.setText(tr("monitoring.overview_perm_fs"))
+        self.fs_val.setText(tr("monitoring.overview_perm_fs_value"))
+        self.network_lbl.setText(tr("monitoring.overview_perm_network"))
+        self.process_lbl.setText(tr("monitoring.overview_perm_process"))
+        self.process_val.setText(tr("monitoring.overview_perm_process_value"))
+        self.env_lbl.setText(tr("monitoring.overview_perm_env"))
+        self.env_val.setText(tr("monitoring.overview_perm_env_value"))
+        self.edit_btn.setText(tr("monitoring.overview_edit"))
+
+    def refresh(self) -> None:
+        net_blocked = bool(self._ctx.config.agent_security.get("block_network"))
+        self.network_val.setText(
+            tr("monitoring.overview_perm_network_blocked") if net_blocked
+            else tr("monitoring.overview_perm_network_allowed"))
+        apply_badge(self.network_val, "badgeWarn" if net_blocked else "badgeSuccess")