feat(desktop): add Runtime Host Session execution IPC

[M4n5ter]

English

Summary

• Add an isolated Runtime Host-backed Desktop Session and Turn IPC candidate while production continues to use the embedded Runtime until M5.
• Preserve the existing renderer contract across canonical transcript loading, mid-Turn attach, live assistant and tool events, Interactions, queue and steering, interruption, context actions, branching, and revision.
• Route selected attachments through Host-owned Session Artifacts and expose a bounded execution-boundary read model without transferring the permission profile to the Client.
• Keep native voice and Skill invocation explicitly unavailable on the candidate path until their Desktop Runtime-domain adapters land; the current production path is unchanged.
• Advance the same-v0 compatibility epoch so a Client cannot reuse a stale Host that lacks the new closed operation schema.

Testing

• npm --workspace @maka/core test (776 passed)
• npm --workspace @maka/runtime-host test (664 passed)
• npm --workspace @maka/desktop test (1647 passed)
• npm run typecheck
• npm run lint -- --diagnostic-level=error
• Real UDS coverage for the Desktop Session facade, attachment ingest, canonical transcript/live continuity, Interaction, queue, and Turn control

简体中文

概要

• 新增隔离的 Runtime Host-backed Desktop Session 与 Turn IPC candidate；在 M5 之前，production 仍继续使用 embedded Runtime。
• 在 canonical transcript 加载、Turn 中途接入、assistant/tool live event、Interaction、queue/steering、中断、context action、branch 与 revision 流程中保留现有 renderer contract。
• 将用户选择的附件写入 Host-owned Session Artifact，并提供有界的 execution-boundary read model，不把完整 permission profile 转交给 Client。
• 在对应的 Desktop Runtime-domain adapter 完成前，candidate path 会明确拒绝 native voice 与 Skill invocation；现有 production path 不受影响。
• 推进同一 v0 下的 compatibility epoch，避免 Client 复用缺少新 closed operation schema 的旧 Host。

测试

• npm --workspace @maka/core test（776 项通过）
• npm --workspace @maka/runtime-host test（664 项通过）
• npm --workspace @maka/desktop test（1647 项通过）
• npm run typecheck
• npm run lint -- --diagnostic-level=error
• 通过真实 UDS 覆盖 Desktop Session facade、附件 ingest、canonical transcript/live continuity、Interaction、queue 与 Turn control