Structured logging / callback hooks in the SDK

[Alhaji-naira]

Summary

Add an optional onEvent/logger hook to AgentGuardClientOptions that fires on submit/confirm/deny with structured data, so agent runners can trace decisions.

Acceptance criteria

• Hook fires at documented points
• No-op by default
• Covered by tests