fix(cli): confirm deploy when IAM precheck fails

[evanlowe]

Summary

• prompt before continuing a Studio deployment when required IAM actions are missing
• default to cancelling unless the user explicitly confirms
• preserve strict --precheck-only behavior and localize prompts for Volcengine and BytePlus
• add CLI coverage for declining and accepting the warning

Tests

• uv run --extra dev pre-commit run --all-files
• uv run --extra dev --extra extensions pytest tests/cli/test_studio_deploy_permissions.py -q (13 passed)
• uv run --extra dev --extra extensions pytest (2563 passed, 6 skipped; 2 unrelated timeout failures passed on isolated rerun)
• isolated rerun: test_generated_project_and_debug_run_api_lifecycle and test_generated_agent_debug_omits_stdio_mcp_on_remote_bind (2 passed)