fix(pi-extension): allow plan submission device through planning write guard (#1547)

The planning-phase tool_call gate rejected xd://plannotator_submit_plan as a non-markdown path, making plan submission impossible.

Allowlist exactly that device URI; all other device URIs, non-markdown writes, and the submit tool's file validation are unchanged.

Closes #1466.