perf(activity): keep only loaded activity pages in the renderer, driven by Main's summary

The renderer no longer holds the whole history. Startup sends queued
changes, lets Main reconcile leftover pending/running records against the
stored tasks (same localized interruptedOnRestart line), then loads the
first page (200). The Activity page loads a full visible batch (500, as
before paging); "load more" shows the next batch and loads the next page
behind it; a filter switch refetches that filter's first page; leaving the
page trims to one batch. Counts, project/conversation groups, titles,
conversation status and the clear count come from activityHistory.summary
(refreshed on entry, by the page timer, the refresh button and after load
more / filter changes).

Records that are not loaded are still updated incrementally: the update
contract gains content-matched changes (upsert-call, update-request,
resolve-approval, settle-request, remove-request, remove-call) that Main
applies in SQL to shown rows; the store applies the same semantics to its
pages through the shared reference. update returns Main's stored call
records so a call whose earlier record was not loaded keeps one id. Task
refresh reconciles via Main SQL. Legacy localStorage records migrate as
incremental changes; the renderer no longer calls replace.

Tests: randomized sequences of every action, page loads, trims, flushes and
injected failures against the former full-list code on a real database;
first page <= 200 after startup; flush payload depends only on changed
records (including unloaded ones); ActivityPanel output with pages + summary
equals the full-list rendering for randomized datasets with duplicates;
restart interrupts leftover records with the same detail; clear empties the
database, pages and summary; SQL change semantics equal the reference.

src/shared/contracts.ts

@@ -51,6 +51,7 @@ import {
   type ActivityHistorySummary,
   type ActivityHistorySummaryRequest,
   type ActivityHistoryUpdate,
+  type ActivityHistoryUpdateResult,
   type ActivityRecord,
   type TokenUsageSummary,
   type ConversationSnapshot,
@@ -2169,7 +2170,7 @@ export type DesktopApi = {
      * Incremental save (PERF-15): only the changed records cross IPC and are
      * written. `replace` remains for the legacy localStorage migration.
      */
-    update: (update: ActivityHistoryUpdate) => Promise<void>
+    update: (update: ActivityHistoryUpdate) => Promise<ActivityHistoryUpdateResult | void>
     /** Deletes the whole history in one transaction. */
     clear: () => Promise<void>
     /** One page of shown records, newest first (see activityHistoryPageRequestSchema). */