Add `tardis.sonic.freeze` permission and configurable cooldown period