feat(storage): move desktop SQLite ownership into a storage utility process

Main no longer opens desktop business SQLite. A single utility-process
storage owner holds the Assistant, Knowledge, attachment, document-result,
remote-binding and native model-ledger databases and runs whole domain
transactions; Main and Runtime callers use explicit async domain operations.

- Remove the Main readWithFallback path and the supervision worker's
  separate business write connection; manifests are scanned read-only and
  committed by the sole writer.
- Remote events are ACKed only after commit; process loss reports
  unconfirmed writes instead of replaying them.
- Use native utilityProcess messaging with one in-flight bound (32) and
  ordered waiting instead of capacity rejection and retries.
- Start the storage process before the window so startup overlaps.
- Keep short tool output in memory and store full output once in owned
  storage; paging, branching, restart and deletion reuse that copy.
- Put required runtime launch files under goodbuddy-prefixed owned temp
  directories and reclaim confirmed stale ones; stop writing duplicate
  parsed.md.
- Add lint guards for SQLite ownership and architecture, concurrency
  acceptance fixtures, and maintenance/architecture documentation.

Validation: typecheck and lint pass. Alternating baseline (edf019aa) vs
candidate runs show no regression on single-session, C01, C02, C04 and a
5-minute C06; Main p99 drops from ~21 ms to ~16.7 ms under concurrency.
Fresh portable copy (1.75M events) upgrade content unchanged; real-model
output paging passes with 4 external requests. Full npm test runs had
1-9 different timing-sensitive failures per run that pass when rerun.
Not covered: C03 review publication, C07 source body, app-level C05.

src/main/assistant/direct-model-subagent-service.ts

@@ -6,7 +6,8 @@ import {
   PagedOutputStore,
   type PagedOutputPage,
   type PagedOutputReference,
-  type PagedOutputWriter
+  type PagedOutputWriter,
+  type PagedOutputStoreOptions
 } from '../agent/paged-output-store'
 import { SubagentScheduler } from './subagent-scheduler'
 
@@ -95,11 +96,12 @@ export type DirectModelSubagentChildRunInput<TRequestContext = unknown> = {
   context: DirectModelSubagentContext
   requestContext: TRequestContext
   signal: AbortSignal
-  onOutput: (delta: string) => void
+  onOutput: (delta: string) => Promise<void>
   onModelUsage: (usage: RuntimeModelUsageEvent) => void
 }
 
 export type DirectModelSubagentServiceDependencies<TRequestContext = unknown> = {
+  outputStore?: PagedOutputStoreOptions
   scheduler: SubagentScheduler
   runChild: (
     input: DirectModelSubagentChildRunInput<TRequestContext>
@@ -172,14 +174,16 @@ function addTokenCount(current: number, value: number): number {
 
 export class DirectModelSubagentService<TRequestContext = unknown> {
   private readonly ownerRuns = new Map<string, Set<OwnerRun>>()
-  private readonly outputs = new PagedOutputStore('subagent')
+  private readonly outputs: PagedOutputStore
   private disposed = false
   private disposePromise?: Promise<void>
 
   constructor(
     private readonly dependencies:
       DirectModelSubagentServiceDependencies<TRequestContext>
-  ) {}
+  ) {
+    this.outputs = new PagedOutputStore('subagent', dependencies.outputStore)
+  }
 
   async run(
     input: DirectModelSubagentRunInput<TRequestContext>
@@ -247,7 +251,10 @@ export class DirectModelSubagentService<TRequestContext = unknown> {
   }
 
   dispose(): Promise<void> {
-    this.disposePromise ??= this.disposeOnce()
+    this.disposePromise ??= this.disposeOnce().catch((error: unknown) => {
+      this.disposePromise = undefined
+      throw error
+    })
     return this.disposePromise
   }
 
@@ -347,7 +354,7 @@ export class DirectModelSubagentService<TRequestContext = unknown> {
                     '编程 Subagent 输出必须是字符串'
                   )
                 }
-                writer!.append(delta)
+                return writer!.append(delta)
               },
               onModelUsage: (usage) => {
                 usageReported = true