feat(storage): move desktop SQLite ownership into a storage utility process

Main no longer opens desktop business SQLite. A single utility-process
storage owner holds the Assistant, Knowledge, attachment, document-result,
remote-binding and native model-ledger databases and runs whole domain
transactions; Main and Runtime callers use explicit async domain operations.

- Remove the Main readWithFallback path and the supervision worker's
  separate business write connection; manifests are scanned read-only and
  committed by the sole writer.
- Remote events are ACKed only after commit; process loss reports
  unconfirmed writes instead of replaying them.
- Use native utilityProcess messaging with one in-flight bound (32) and
  ordered waiting instead of capacity rejection and retries.
- Start the storage process before the window so startup overlaps.
- Keep short tool output in memory and store full output once in owned
  storage; paging, branching, restart and deletion reuse that copy.
- Put required runtime launch files under goodbuddy-prefixed owned temp
  directories and reclaim confirmed stale ones; stop writing duplicate
  parsed.md.
- Add lint guards for SQLite ownership and architecture, concurrency
  acceptance fixtures, and maintenance/architecture documentation.

Validation: typecheck and lint pass. Alternating baseline (edf019aa) vs
candidate runs show no regression on single-session, C01, C02, C04 and a
5-minute C06; Main p99 drops from ~21 ms to ~16.7 ms under concurrency.
Fresh portable copy (1.75M events) upgrade content unchanged; real-model
output paging passes with 4 external requests. Full npm test runs had
1-9 different timing-sensitive failures per run that pass when rerun.
Not covered: C03 review publication, C07 source body, app-level C05.

src/agent-daemon/image-tool-mcp.test.ts

@@ -92,7 +92,7 @@ describe('remote image MCP to Main service', () => {
       return imageOperationSchema.parse(JSON.parse((result.content as { text: string }[])[0]!.text))
     }
     const first = await call({ intent: 'create', prompt: 'A blue square' })
-    const uploaded = h.service.persistUploads(h.context, [{ name: 'source.png', mediaType: 'image/png', data: png }])
+    const uploaded = await h.service.persistUploads(h.context, [{ name: 'source.png', mediaType: 'image/png', data: png }])
     const uploadEdit = await call({ intent: 'edit', prompt: 'Make the uploaded square red', sourceArtifactIds: uploaded })
     const historyEdit = await call({ intent: 'edit', prompt: 'Make the previous result green', sourceArtifactIds: first.artifactIds })
     expect([first, uploadEdit, historyEdit].map(op => op.state)).toEqual(['completed', 'completed', 'completed'])
@@ -139,7 +139,7 @@ describe('remote image MCP to Main service', () => {
     expect((await remote.client.listTools()).tools.map(tool => tool.name)).toContain('save_image')
     // Larger than one 128 KiB chunk so the Agent must reassemble several replies.
     const large = Buffer.concat([Buffer.from(png, 'base64'), randomBytes(300 * 1024)])
-    const [artifactId] = h.service.persistUploads(h.context, [{ name: 'large.png', mediaType: 'image/png', data: large.toString('base64') }])
+    const [artifactId] = await h.service.persistUploads(h.context, [{ name: 'large.png', mediaType: 'image/png', data: large.toString('base64') }])
     const directory = await mkdtemp(join(tmpdir(), 'goodbuddy-remote-save-'))
     cleanup.push(() => rm(directory, { recursive: true, force: true }))
     const target = join(directory, 'nested', 'out.png')
@@ -159,7 +159,7 @@ describe('remote image MCP to Main service', () => {
 
   it('saves through a mode-free desktop binding', async () => {
     const h = await setup()
-    const [artifactId] = h.service.persistUploads(h.context, [{ name: 'source.png', mediaType: 'image/png', data: png }])
+    const [artifactId] = await h.service.persistUploads(h.context, [{ name: 'source.png', mediaType: 'image/png', data: png }])
     const remote = await h.connect({ save: true })
     const directory = await mkdtemp(join(tmpdir(), 'goodbuddy-remote-save-'))
     cleanup.push(() => rm(directory, { recursive: true, force: true }))