Detect repeated permission denial patterns

[byapparov]

Phase 4 — Threat and anomaly signals

Track permission denial rate per session. Emit threat_signal when denials exceed threshold (e.g., 5 denials in 60 seconds). Could indicate prompt injection attempting privilege escalation.