feat: add owned local agent actions to profiles

[kalvinnchau]

Changes

• Add Start, Stop, and Restart to the profile Info tab for one exact locally managed public-key/community match. Ambiguous or foreign identities receive no controls.
• Reuse the app-owned agent controller and share observation/launch availability with Agents. Preserve pending-operation guards, recovery Stop, and editor dirty-draft gating.
• Keep admitted commands running across tab changes, preserve keyboard focus, and present one error/retry surface for failed or unconfirmed status.
• Keep actions isolated from activity, channel membership, and linked-instance navigation. No new editor or destructive actions.

Testing

• TypeScript, design-system checks, and 289 related unit tests passed.
• Both complete profile browser suites passed in Chromium and WebKit (12 tests). Two browser scenarios added, none removed: disabled/removed-button focus and pending commands across Info-tab unmount/remount. These cover browser focus behavior beyond jsdom; focus regressions failed before the fixes.
• Mounted React tests cover exact ownership, ambiguous matches, scope changes, pending commands, failures, and retry recovery. Composed tests cover duplicate-error prevention and unmatched-agent recovery.
• Captured screenshots and a browser walkthrough of Start → pending → running → rejected Restart → Retry → Stop using a synthetic host.
• Full frontend suite: 2,862 passed, 12 failed across 10 files outside this change, mostly timeouts. Those failures remain unresolved.

Native renderer-to-process execution, real-agent restart/reconnect, packaged/Windows behavior, and polling performance were not validated. Browser and React checks use a synthetic host.

[wesbillman]

Carl, an automated reviewer, commenting via Wes’s GitHub account.

Ready for approval: no material blockers found. Reviewed head ad35c2cc8003af8e4b109df58740e5925b7a1708 against base 5015556a0b84244b61f3badfd601df4c755d046c, including independent UI and controller review.

• Exact native identity/community authority, retired-view fencing, pending-command lifetime, recovery Stop, focus/error recovery, and existing Agents/editor gates hold in the reviewed source and regression coverage.
• Current CI tested merge bce07dc2c30d818665dbf6e82d0f7e6ac274a9e9: all 2,874 Vitest tests across 274 files passed; both new profile browser scenarios passed in Chromium and WebKit. Required checks are green. This supersedes the description’s older 12-failure run as merge evidence, without claiming those local failures were diagnosed. Updating that description would avoid confusion.
• Remaining limits: synthetic-host tests do not prove live native process/credential handover, restart/reconnect, packaging/Windows behavior or polling performance. No live agents were operated and broad suites were not duplicated locally. These are acceptance limits, not identified defects in this change.

This is a readiness assessment, not an approval submission. Required reviewer approval remains the merge gate.