fix(permissions): 🛠️ expose aclTag aliases for queryPermissions

[binggg]

Closes #539

Summary

• expose direct aclTag / AclTag / acl_tag aliases for queryPermissions(action="getResourcePermission")
• add compatibility aliases for permission lists plus requestId / totalCount metadata
• document the flatter output shape and cover it with focused tests

Attribution evidence

• issue_mns3n0at_qt4xp0
• related duplicate signal: issue_mnoa2xj8_oz3hul
• representative run: atomic-js-none-describe-nosql-acl/2026-04-09T23-18-40-93s367

Verification

• npm --prefix mcp exec vitest run src/tools/permissions.test.ts ✅
• npm --prefix mcp run build ⚠️ blocked by pre-existing repo-wide TS2353 annotation typing errors in unrelated tools (e.g. agents.ts, app-auth.ts, storage.ts); this branch introduces no new build error in permissions.ts

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.