feat(desktop): enable Computer Use in managed sessions

[YayoiNanoka]

Summary

Enable Computer Use in managed Auto sessions without switching the Session to Full Access.

• resolve each application target through the native host before Client Capability admission
• persist and reuse Session Grants by canonical macOS bundle ID, with separate application-catalog admission and grant-free duration waits
• freeze the resolved pid + processGeneration + windowId target and revalidate it before every real effect
• upgrade the native protocol to maka.cu/3 and remove the retired five-class Computer Use approval model

This is the second slice for #4012. Browser and Desktop Settings landed in #4143; Desktop MCP remains a separate follow-up.

Depends on maka-agent/maka-cu#7.

Refs #4012

中文

让 Computer Use 可以在 managed Auto Session 中使用，不需要把 Session 切换为完全权限。

• 在 Client Capability admission 前，由原生 Host 解析每次调用对应的应用目标
• 按规范化的 macOS bundle ID 持久化并复用 Session Grant；应用列表使用独立授权，纯时长等待不需要授权
• 冻结解析后的 pid + processGeneration + windowId，并在每个真实副作用前重新校验
• 将原生协议升级为 maka.cu/3，删除旧的五级 Computer Use 审批模型

这是 #4012 的第二个切片。Browser 和 Desktop Settings 已在 #4143 合入；Desktop MCP 留给后续独立 PR。

依赖 maka-agent/maka-cu#7。

Verification

• 316 focused Core/Runtime/Runtime Host/Computer Use tests passed.
• 18 focused Desktop tests passed.
• The manifest producer test passed, and the pinned native release binary compiled successfully on a macOS 26 GitHub runner.
• Core, Storage, MCP, Runtime Host, Computer Use, and UI type checks passed.
• Formatting and git diff --check passed.
• Full Runtime declaration typecheck remains blocked by the checkout's unrelated Zod portability error; Desktop main typecheck remains blocked by missing local sigstore packages.

Draft follow-up

• Merge or rebase the native dependency.
• Confirm required repository CI on this exact head.

AI use

Select exactly one:

• No generative tool made a substantive contribution
• Generative tooling made a substantive contribution

Tool(s) and scope: OpenAI Codex contributed implementation, tests, commit preparation, and this PR description. Each affected commit carries Generated-by: OpenAI Codex.

This draft was prepared and submitted by OpenAI Codex on behalf of the human contributor of record, YayoiNanoka.

Checklist

• Tests cover the change and fail without it
• Lint, format, typecheck and the affected suites pass locally

Does this PR entail a change in behavior?

• Yes — described under Summary above
• No