feat(storage): move desktop SQLite ownership into a storage utility process

Main no longer opens desktop business SQLite. A single utility-process
storage owner holds the Assistant, Knowledge, attachment, document-result,
remote-binding and native model-ledger databases and runs whole domain
transactions; Main and Runtime callers use explicit async domain operations.

- Remove the Main readWithFallback path and the supervision worker's
  separate business write connection; manifests are scanned read-only and
  committed by the sole writer.
- Remote events are ACKed only after commit; process loss reports
  unconfirmed writes instead of replaying them.
- Use native utilityProcess messaging with one in-flight bound (32) and
  ordered waiting instead of capacity rejection and retries.
- Start the storage process before the window so startup overlaps.
- Keep short tool output in memory and store full output once in owned
  storage; paging, branching, restart and deletion reuse that copy.
- Put required runtime launch files under goodbuddy-prefixed owned temp
  directories and reclaim confirmed stale ones; stop writing duplicate
  parsed.md.
- Add lint guards for SQLite ownership and architecture, concurrency
  acceptance fixtures, and maintenance/architecture documentation.

Validation: typecheck and lint pass. Alternating baseline (edf019aa) vs
candidate runs show no regression on single-session, C01, C02, C04 and a
5-minute C06; Main p99 drops from ~21 ms to ~16.7 ms under concurrency.
Fresh portable copy (1.75M events) upgrade content unchanged; real-model
output paging passes with 4 external requests. Full npm test runs had
1-9 different timing-sensitive failures per run that pass when rerun.
Not covered: C03 review publication, C07 source body, app-level C05.

src/main/assistant/supervision-activity.test.ts

@@ -68,7 +68,7 @@ it.each([false, true])('groups heartbeat and downstream supervision with truthfu
       const result = await supervisor.run({ ...request, trigger: 'heartbeat' }, run.id)
       return { status: result.status ?? 'completed', runId: result.runId }
     } })
-    const config = heartbeat.create({ name: 'Daily', scope: request.scope, timezone: 'UTC', recurrence: { type: 'daily', localTime: '09:00' }, enabled: true, lookbackHours: 24, retentionDays: 30 }, new Date('2026-09-23T00:00:00Z'))
+    const config = await heartbeat.create({ name: 'Daily', scope: request.scope, timezone: 'UTC', recurrence: { type: 'daily', localTime: '09:00' }, enabled: true, lookbackHours: 24, retentionDays: 30 }, new Date('2026-09-23T00:00:00Z'))
     const pending = failed ? heartbeat.runNow({ id: config.id, idempotencyKey: crypto.randomUUID() })
       : heartbeat.processDue(new Date('2026-09-23T09:00:00Z'))
     await started
@@ -85,7 +85,7 @@ it('records supervision failures against the heartbeat that triggered them', asy
   db.initialize(process.cwd())
   try {
     const heartbeat = new HeartbeatService(db, { review: async () => { throw new Error('Callback failed') } })
-    const config = heartbeat.create({ name: 'Daily', scope: request.scope, timezone: 'UTC', recurrence: { type: 'daily', localTime: '09:00' }, enabled: true, lookbackHours: 24, retentionDays: 30 })
+    const config = await heartbeat.create({ name: 'Daily', scope: request.scope, timezone: 'UTC', recurrence: { type: 'daily', localTime: '09:00' }, enabled: true, lookbackHours: 24, retentionDays: 30 })
     await heartbeat.runNow({ id: config.id, idempotencyKey: crypto.randomUUID() })
     expect(db.listSupervisionActivity()[0]).toMatchObject({ status: 'failed', error: 'Callback failed', scope: request.scope, heartbeatStatus: 'completed', supervisionStatus: null })
   } finally { db.close() }
@@ -96,8 +96,8 @@ it('filters by exact plan ID before pagination, including plans with the same na
   try {
     const heartbeat = new HeartbeatService(db, { review: async () => { throw new Error('Expected failure') } })
     const input = { name: 'Daily', scope: request.scope, timezone: 'UTC', recurrence: { type: 'daily' as const, localTime: '09:00' }, enabled: true, lookbackHours: 24, retentionDays: 30 }
-    const first = heartbeat.create(input)
-    const second = heartbeat.create(input)
+    const first = await heartbeat.create(input)
+    const second = await heartbeat.create(input)
     await heartbeat.runNow({ id: first.id, idempotencyKey: crypto.randomUUID() })
     const firstId = db.listSupervisionActivity()[0]!.id
     await heartbeat.runNow({ id: second.id, idempotencyKey: crypto.randomUUID() })
@@ -158,7 +158,7 @@ it('uses actual manual heartbeat and downstream finish times', async () => {
       vi.setSystemTime(new Date('2026-09-23T10:03:00Z'))
       throw new Error('Projection failed')
     } })
-    const config = heartbeat.create({ name: 'Daily', scope: request.scope, timezone: 'UTC', recurrence: { type: 'daily', localTime: '09:00' }, enabled: true, lookbackHours: 24, retentionDays: 30 })
+    const config = await heartbeat.create({ name: 'Daily', scope: request.scope, timezone: 'UTC', recurrence: { type: 'daily', localTime: '09:00' }, enabled: true, lookbackHours: 24, retentionDays: 30 })
     const run = await heartbeat.runNow({ id: config.id, idempotencyKey: crypto.randomUUID() })
     expect(run.completedAt).toBe('2026-09-23T10:00:00.000Z')
     expect(db.listSupervisionActivity()[0]).toMatchObject({ startedAt: '2026-09-23T10:00:00.000Z', completedAt: '2026-09-23T10:03:00.000Z', status: 'failed' })