sync: align agent permissions and runtime workflows

[Luhaozhu]

Summary

• sync the latest deterministic Community Edition output from the full upstream tree
• add context-usage snapshots and the matching chat UI updates
• introduce declarative permissions for built-in file and command tools, including execution tickets, local confinement, and trusted unattended runs
• keep MCP connectors on the current trusted whitelist while improving progressive plugin loading, autonomous loops, automation, and ChatRun recovery
• update the installer and bilingual deployment and product documentation

Validation

• python3 scripts/build_ce.py
• CE forbidden-artifact, binary-allowlist, brand, and license gates
• CE backend import check (import api.app)
• git diff --check

The local production image does not include pytest, so the CE pytest and frontend dependency-install checks were not run locally. No desktop bundle was built.