fix(pat): support batch agentCode and guarded grants

[shangguanxuan633-lab]

Summary

• carry explicit --agentCode / DINGTALK_DWS_AGENTCODE into PAT batch plan/grant args
• allow missing agentCode so PAT core can apply the server-side default
• require explicit --yes before executing batch grants, while keeping dry-run and single-scope grants unchanged
• keep only the canonical env name DINGTALK_DWS_AGENTCODE; ignore draft/reversed names

Validation

• go test ./internal/pat ./test/unit -run 'TestChmod|TestResolveAgentCode|TestHandleToolResult|TestHostOwnsPATFlow|TestPAT'
• prepub CLI smoke with DINGTALK_PAT_MCP_URL=https://pre-mcp-gw.dingtalk.com/server/abc3c880fb90f04b52d1426aaf093766e5fc9ec38411688cbb74df42a584d374
• verified target agentCode=dinglqdkz3mmw2xwvend was returned by dry-run, single grant, flag-priority grant, and batch grant
• verified DB agent_pat for uid=2010955235 contains 13 ACTIVE permanent rows for agent_code=dinglqdkz3mmw2xwvend