Commits on May 7, 2026

permissions: align developer docs with the new model

Brings every developer-facing doc that mentioned the legacy requestPermissions / PermissionScope surface into line with the permission system landed over the previous commits:

- HARBOR_WEB_API_EXPLAINER.md, WEB_AGENTS_API.md, and LLMS.txt now lead with agent.requestCapabilities() and document the typed-action vocabulary, capability tokens, and modes. The legacy requestPermissions surface is preserved as a working path; the docs explain it is mapped to the same engine.

- BUILDING_ON_WEB_AGENTS_API.md adds a typed-action quickstart next to the legacy one.…