feat: Enhance CLI output handling with structured Intermediate Representation (IR)

- Introduced `CliOutputUnit` and `IOutputParser` interfaces for unified output processing.
- Implemented `PlainTextParser` and `JsonLinesParser` for parsing raw CLI output into structured units.
- Updated `executeCliTool` to utilize output parsers and handle structured output.
- Added `flattenOutputUnits` utility for extracting clean output from structured data.
- Enhanced `ConversationTurn` and `ExecutionRecord` interfaces to include structured output.
- Created comprehensive documentation for CLI Output Converter usage and integration.
- Improved error handling and type mapping for various output formats.

ccw/src/core/auth/csrf-middleware.ts

@@ -118,8 +118,9 @@ export async function csrfValidation(ctx: CsrfMiddlewareContext): Promise<boolea
   const method = (req.method || 'GET').toUpperCase();
   if (!['POST', 'PUT', 'PATCH', 'DELETE'].includes(method)) return true;
 
-  // Always allow token acquisition routes.
+  // Always allow token acquisition routes and webhook endpoints.
   if (pathname === '/api/auth/token') return true;
+  if (pathname === '/api/hook') return true;
 
   // Requests authenticated via Authorization header do not require CSRF protection.
   const authorization = getHeaderValue(req.headers.authorization);