Complete Phase 2 workspace plugin runtime

[xiayh17]

Summary

Complete and accept the Phase 2 project-local third-party workspace plugin runtime at application 0.4.1-dev.11.

• Wasmtime no-import/no-WASI isolated guest host with bounded resources and cancellation.
• Dedicated project-scoped permission persistence, trusted grant UI, fresh opaque handles, and bounded project.fs.read, workspace.r.inspect, and network.fetch broker operations.
• Controlled Tool/Source/Skill/Command/Viewer/Panel contributions without raw DOM, Tauri, Provider, process, write, arbitrary-R, credential, or ambient authority.
• Durable enable/restart, disable, crash/Retry, recoverable uninstall/restore, exact retention purge, update CAS, cached rollback, and crash-point recovery.
• Windows stable file identity uses least-privilege FILE_READ_ATTRIBUTES plus GetFileInformationByHandle.
• Windows installed acceptance runs in a parallel matrix lane; cold Windows critical path fell from 31m49s to about 14m39s, with separate v3 debug/release caches.

Exact source and evidence

• Head: 37d973580637c6c2f229772bb1ed99569890b85f
• Fork integration PR: Complete Phase 2 workspace plugin runtime Rho_for_mac#2
• Final seven-lane Ready validation: https://github.com/YuLab-SMU/Rho_for_mac/actions/runs/32464566934 — PASS on attempt 2
• Earlier exact six-leg validation: https://github.com/YuLab-SMU/Rho_for_mac/actions/runs/32456281744 — PASS
• Canonical comparison: one Rho/main-only commit, 47 head-only commits, common base 5a07cd4; local merge-tree check is conflict-free.

Scope boundaries

The owner explicitly accepted Phase 2 integration without the policy-blocked local Browser visual gate and moved visual modularization to a separate follow-on design stream. This PR does not authorize a release, publication, marketplace/catalog, remote plugin update, production signing, Phase 2.5 execution, Phase 3, or visual redesign.

[xiayh17]

Canonical integration validation for exact head 37d973580637c6c2f229772bb1ed99569890b85f:

• Draft Fast 32466843613: PASS.
• Ready seven-lane Compatibility/installed run 32467554365: PASS.
• macOS arm64, Windows x64 GNU, and Linux x86-64 passed stable and exact Rust 1.88 source/MSRV validation.
• Windows installed acceptance passed parallel release/NSIS build, unbundled and installed candidate/legacy smoke, silent uninstall, registry cleanup, and executable removal.
• Existing six source/MSRV check names were preserved; the added windows-latest / installed acceptance lane remains separately required.
• No release, publication, signing service, artifact upload, marketplace, Phase 2.5 execution, Phase 3, or visual redesign was performed.