feat(runtime-host): own input and artifact preparation

[M4n5ter]

English

Summary

• resolve explicitly selected Skills in Runtime Host before fresh Turn admission while preserving exact durable retries
• add bounded, connection-scoped Artifact ingest and canonical attachment validation
• integrate hosted Tool Artifacts and oversized tool-result archive/read with the canonical Artifact authority

Why

Input preparation and the remaining execution Artifact paths were still owned by individual clients or execution surfaces. That made equivalent clients behave differently and left retry, reconnect, and attachment trust semantics outside Runtime Host.

This change makes Runtime Host the single authority for preparing hosted inputs and publishing execution Artifacts without exposing a generic Store RPC.

Key boundaries

• the wire protocol remains v0 and exposes only bounded domain operations
• upload staging is connection-bound, replay-safe, capacity-limited, and digest-verified
• Turn attachments must match live canonical Artifact records before admission
• fresh Skill expansion happens after Session admission checks; durable retries reuse the exact normalized input
• Tool Artifact reads enforce containment, regular-file identity, and size limits before publication

Validation

• npm test -w @maka/runtime-host — 611 passed
• npm run typecheck
• npm run lint
• npm run build
• git diff --check origin/main...HEAD

Part of #1167 and #853.

中文

概要

• 在全新 Turn admission 前由 Runtime Host 解析显式选择的 Skills，同时保持持久化重试的精确一致性
• 增加有界、绑定连接的 Artifact ingest，以及规范化附件校验
• 将 Tool Artifacts 和超大工具结果的归档/读取接入统一的 Artifact 权威路径

背景

输入准备和部分执行期 Artifact 路径此前仍由不同客户端或执行端分别负责，导致等价客户端可能产生不同语义，也使重试、重连和附件可信性没有统一落在 Runtime Host。

本次改动让 Runtime Host 成为托管输入准备和执行期 Artifact 发布的唯一权威，同时不开放通用 Store RPC。

关键边界

• wire protocol 继续保持 v0，仅暴露有界的领域操作
• 上传暂存绑定连接，支持安全重放，并限制容量且校验摘要
• Turn admission 前，附件必须与当前有效的规范 Artifact 记录完全匹配
• 全新 Turn 在 Session admission 检查后展开 Skills；持久化重试复用完全相同的规范输入
• Tool Artifact 发布前校验路径包含关系、普通文件身份和大小限制

验证

• npm test -w @maka/runtime-host — 611 项通过
• npm run typecheck
• npm run lint
• npm run build
• git diff --check origin/main...HEAD

属于 #1167 和 #853 的一部分。