fix(pi-agent): copy settle-policy into the runner image

runner.mjs imports ./settle-policy.mjs but the Dockerfile only copied
runner.mjs, which crashed shuimu-pi-agent-dev on import. COPY the
runtime module and assert every relative import is in the image set.

Co-authored-by: Cursor <cursoragent@cursor.com>

deploy/pi-agent/Dockerfile

@@ -22,9 +22,10 @@ RUN pi --version
 
 WORKDIR /app
 
-# 复制 runner、扩展工具以及入口脚本
+# 复制 runner、其相对 import 运行时模块、扩展工具以及入口脚本
 COPY deploy/pi-agent/extensions/ /app/extensions/
 COPY deploy/pi-agent/runner.mjs /app/runner.mjs
+COPY deploy/pi-agent/settle-policy.mjs /app/settle-policy.mjs
 COPY deploy/pi-agent/entrypoint.sh /app/entrypoint.sh
 
 RUN chmod +x /app/entrypoint.sh /app/runner.mjs