fix(fxt,api): wire real gRPC auth login and add api.access permission

- Replace simulated login in fxt CLI with real AuthServiceClient gRPC call
- Add auth proto to fxt build.rs compile list and lib.rs proto module
- Add api.access permission to JWT claims issued by AuthGrpcService
- Remove orphaned ci-sensor.yaml (replaced by cluster-applied version)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

services/api/src/auth/grpc_login.rs

@@ -88,7 +88,7 @@ impl AuthGrpcService {
             iss: self.jwt_config.jwt_issuer.clone(),
             aud: self.jwt_config.jwt_audience.clone(),
             roles: vec!["user".to_string()],
-            permissions: vec![],
+            permissions: vec!["api.access".to_string()],
             token_type: token_type.to_string(),
             session_id: Some(session_id.to_string()),
         };