sync: refresh Community Edition with marketplace and recovery updates

[Luhaozhu]

This refreshes the deterministic Community Edition tree from the current full upstream and reconciles it with the latest public main.

Highlights

• Adds durable chat execution recovery, sequencing, tool-effect ledgers, plan/update safeguards, and local SQLite schema upgrades.
• Preserves skill marketplace introductions through submission, storage, listing, and fallback rendering.
• Isolates async Redis clients per event loop so subagent worker loops cannot reuse futures created by the main backend loop.
• Refreshes the desktop bridge, clipboard/file handling, local-server recovery, overlay support, and related documentation.
• Makes the home and conversation composers grow with multiline content, with regression coverage for desktop and mobile breakpoints.
• Synchronizes desktop release metadata at 0.5.23 without publishing release artifacts in this refresh.
• Replaces the previous bundled office-editing implementations with the current OfficeCLI and Morph PPT skill set and sandbox dependency contract.
• Synchronizes catalog, capability, MCP, model-provider, and canvas behavior across backend and frontend.

Complete comparison against latest public main

Base: 55af8fc4a328d40f930d0cf1bab24cfda7ff5a5f
Head: 404333aac6d972cf98d58b966f4022eda6350c1f

• 709 files changed: 274 added, 200 modified, and 235 deleted.
• 79,079 insertions and 57,208 deletions.
• 636 changed files under src, 30 under desktop-uos, 23 under document, and 14 under desktop.
• The public main tree and the latest previously merged CE branch were byte-identical before this refresh.
• The committed CE tree is byte-identical to the latest deterministic CE output (git archive plus recursive content comparison).
• The Redis event-loop isolation implementation and regression coverage are present; the full regeneration also caught and synchronized configuration/version metadata differences.
• No Langfuse source, configuration, overlay, tests, or dependency is present in the CE tree.
• Private product names, deployment addresses, EE-only paths, internal documents, CE derivation tooling, secrets, and real .env files are excluded by the CE gates.

Verification

• Deterministic CE derivation gates passed: required runtime files, forbidden artifacts, binary allowlist, brand/path scan, and LICENSE.
• CE import/OpenAPI/ORM contract and CE release regression suite passed.
• CE frontend production build passed on Node 22: i18n, dark-mode, TypeScript, Vite, and precompression.
• Redis loop-isolation and in-memory Redis regression checks passed.
• The new diff passes whitespace validation; the committed tree matches the generated CE tree byte-for-byte.

The PR remains draft while CI runs.