feat(trust): add clx trust command for auto-allow mode

[blackaxgit]

Summary

• Add clx trust on/off/status subcommands for managing auto-allow mode
• Upgrade trust token from plain file to JSON with configurable duration, session scope, and metadata
• Add trust_mode_max_duration and trust_mode_default_duration config fields
• Backward compatible with existing trust_mode config

Usage

clx trust on                    # Enable for 1 hour (default)
clx trust on --duration 30m     # Enable for 30 minutes
clx trust on --duration 2h      # Enable for 2 hours
clx trust on --session          # Enable for current session only
clx trust off                   # Disable immediately
clx trust status                # Show status with remaining time
clx trust status --json         # Structured JSON output

Test plan

• clx trust on creates JSON token and prints confirmation
• clx trust on --duration 30m sets 30-minute expiry
• clx trust off removes token immediately
• clx trust status shows active/inactive with remaining time
• clx trust status --json outputs valid structured JSON
• PreToolUse hook reads JSON token and auto-allows when valid
• 132 unit + 38 integration tests pass (4 new trust tests)
• 0 clippy warnings, cargo fmt clean
• Backward compatible with old token format

Generated with Claude Code