Function resolve_permission_mode 

pub fn resolve_permission_mode<'a>(
    agent: AgentKind,
    native_mode: &'a str,
) -> &'a str

Given an agent’s native permission mode string, return the canonical mode.

Case-insensitive. Returns the original string unchanged if no mapping exists.