Add environment-scoped typed asset store

[JE-Chen]

Enterprise-RPA batch (from multi-agent web research; verified absent). Full layers + tests + EN/Zh v48 docs + README.

Feature (utils/assets, pure-stdlib)

• AssetStore: the orchestrator "Assets/lockers" pillar — centrally-managed config that differs by environment (dev/staging/prod) and carries a type (text/int/bool/credential). get coerces to the declared type and falls back to the default env; credential assets hold a secret reference (a name) that resolve turns into the real value via an injected resolver — Python-only, so secrets never enter get/executor records. list/delete; active_environment() reads JE_AUTOCONTROL_ENV.
• Why: the secret vault is secret-only and config-sync moves whole blobs — neither offers a typed, per-environment named lookup. Clean seam to the existing governance secret resolver.
• Executor AC_set_asset / AC_get_asset / AC_list_assets (credential resolution intentionally not exposed); MCP ac_*; Builder under Data.

Verification

• 11 tests pass (typed coercion int/bool, env override+fallback + no-fallback KeyError, credential get-returns-reference, resolve via injected resolver + no-resolver raises, list/delete, cross-instance persistence, active_environment from env var, executor round-trip, wiring, facade); ruff clean; radon no CC≥C; bandit clean; PySide6-free.
• Stacked on process-mining (Add task/process mining for automation-candidate discovery #255); rebased cleanly onto dev.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 52 complexity · 0 duplication

Metric	Results
Complexity	52
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud