refactor(agents): relocate remaining MAC-only kernel (permissions, deliverable_wait)

permissions.py (authorization Rule/Ruleset model) is consumed across all
MAC subagents + the permissions middleware, with a single external
consumer (user_tool_allowlist service) -> move to
multi_agent_chat/shared/permissions.py and repoint all 42 sites.

deliverable_wait.py (wait_for_deliverable) is used only by the podcast and
video_presentation deliverable tools -> colocate into
subagents/builtins/deliverables/.

No behavior change; import-all + permission/allowlist/deliverable unit
tests stay green.

surfsense_backend/tests/unit/agents/new_chat/test_default_permissions_layering.py

@@ -27,7 +27,7 @@ from __future__ import annotations
 
 import pytest
 
-from app.agents.shared.permissions import (
+from app.agents.multi_agent_chat.shared.permissions import (
     Rule,
     Ruleset,
     aggregate_action,

surfsense_backend/tests/unit/agents/new_chat/test_desktop_safety_rules.py

@@ -10,13 +10,13 @@ from __future__ import annotations
 
 import pytest
 
-from app.agents.shared.middleware.permission import PermissionMiddleware
-from app.agents.shared.permissions import (
+from app.agents.multi_agent_chat.shared.permissions import (
     Rule,
     Ruleset,
     aggregate_action,
     evaluate_many,
 )
+from app.agents.shared.middleware.permission import PermissionMiddleware
 
 pytestmark = pytest.mark.unit
 

surfsense_backend/tests/unit/agents/new_chat/test_permission_middleware.py

@@ -5,12 +5,12 @@ from __future__ import annotations
 import pytest
 from langchain_core.messages import AIMessage, ToolMessage
 
+from app.agents.multi_agent_chat.shared.permissions import Rule, Ruleset
 from app.agents.shared.errors import CorrectedError, RejectedError
 from app.agents.shared.middleware.permission import (
     PermissionMiddleware,
     _normalize_permission_decision,
 )
-from app.agents.shared.permissions import Rule, Ruleset
 
 pytestmark = pytest.mark.unit
 

surfsense_backend/tests/unit/agents/new_chat/test_permissions.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 import pytest
 
-from app.agents.shared.permissions import (
+from app.agents.multi_agent_chat.shared.permissions import (
     Rule,
     Ruleset,
     aggregate_action,