permissionGateAction

Maps a PermissionStatus to the PermissionGateAction a caller should take.

Pure and platform-agnostic so the mapping can be unit-tested in commonTest, and so every gated feature shares one implementation of the guidance rather than each re-deriving it.