feat: keep managed SSH prompts running on Hosts

Managed SSH prompts previously depended on Desktop-owned provider and transcript state, so accepted work could stop or become uncertain when the Desktop, network, or power disappeared. The Agent now owns accepted OpenCode prompt execution, model and tool rounds, cancellation, and the durable semantic transcript, while Desktop remains authoritative for permanent projects, conversations, tasks, and messages.

Recovered work attaches to the original conversation without replay. The project switcher also groups managed SSH projects by saved Host and shows live Agent connectivity beside each group without opening a connection merely to read status. Remote project subtitles now show only the path, and the Agent lock advances to 0.11.14 with Runtime ACP v4.

Release note: 托管 SSH 任务在桌面端、网络或电源中断后可继续在主机上运行，并能回到原会话精确恢复；项目菜单现按主机分组并显示实时连接状态。

docs/architecture/remote-host-environment-provisioning-design.md

@@ -247,6 +247,9 @@ cleanup 失败不回滚环境，也不阻塞下一次更新。
 - 项目管理入口与项目选择分离。项目选择器中的浮动管理按钮直接打开目标项目设置；删除
   不访问 Workspace、Agent 或 Host，因此远端目录已删除或 Host 不可达都不能阻止本地
   项目记录清理。删除当前项目或 Host 级联删除当前项目时只回退到普通本地项目。
+- 项目选择器把托管 SSH 项目按已保存 Host 分组，并只读取 Main 当前持有的 Agent 连接
+  状态显示“未连接 / 连接中 / 就绪 / 异常”；打开菜单或读取状态不得隐式连接 Host。
+  Host 已承担类型与连接语义，项目副标题只显示远端工作目录。
 - Host 删除确认使用本地数据库列出全部引用项目，包括归档项目；确认后级联删除本地项目
   及其会话、任务、成果、记忆、计划和心跳关联，再删除本地 Host 与凭据。整个流程不发起
   SSH，也不删除远端内容；跨 Host 设置文件与 SQLite 的普通失败会恢复已写入的一侧。