feat(storage): move desktop SQLite ownership into a storage utility process

Main no longer opens desktop business SQLite. A single utility-process
storage owner holds the Assistant, Knowledge, attachment, document-result,
remote-binding and native model-ledger databases and runs whole domain
transactions; Main and Runtime callers use explicit async domain operations.

- Remove the Main readWithFallback path and the supervision worker's
  separate business write connection; manifests are scanned read-only and
  committed by the sole writer.
- Remote events are ACKed only after commit; process loss reports
  unconfirmed writes instead of replaying them.
- Use native utilityProcess messaging with one in-flight bound (32) and
  ordered waiting instead of capacity rejection and retries.
- Start the storage process before the window so startup overlaps.
- Keep short tool output in memory and store full output once in owned
  storage; paging, branching, restart and deletion reuse that copy.
- Put required runtime launch files under goodbuddy-prefixed owned temp
  directories and reclaim confirmed stale ones; stop writing duplicate
  parsed.md.
- Add lint guards for SQLite ownership and architecture, concurrency
  acceptance fixtures, and maintenance/architecture documentation.

Validation: typecheck and lint pass. Alternating baseline (edf019aa) vs
candidate runs show no regression on single-session, C01, C02, C04 and a
5-minute C06; Main p99 drops from ~21 ms to ~16.7 ms under concurrency.
Fresh portable copy (1.75M events) upgrade content unchanged; real-model
output paging passes with 4 external requests. Full npm test runs had
1-9 different timing-sensitive failures per run that pass when rerun.
Not covered: C03 review publication, C07 source body, app-level C05.

src/main/magic-notes/magic-note-analyzer.ts

@@ -167,7 +167,7 @@ async function analyzeComments(
   },
   options: MagicNoteAnalysisOptions,
   onText?: (delta: string) => void,
-  onModelUsage?: (event: RuntimeModelUsageEvent) => void
+  onModelUsage?: (event: RuntimeModelUsageEvent) => void | Promise<void>
 ): Promise<MagicNoteComment[]> {
   const source = input.source.trim()
   if (!source && !input.images?.length) {
@@ -238,7 +238,7 @@ ${outputInstructions}`,
           }
         }
       } else if (event.type === 'model-usage') {
-        onModelUsage?.(event)
+        await onModelUsage?.(event)
       } else if (event.type === 'tool') {
         throw new Error('魔法笔记 AI 分析不允许工具调用')
       } else if (event.type === 'generated-image') {
@@ -304,7 +304,7 @@ export async function analyzeMagicNoteEntry(
   entry: MagicNoteEntry,
   options: MagicNoteAnalysisOptions,
   onText?: (delta: string) => void,
-  onModelUsage?: (event: RuntimeModelUsageEvent) => void,
+  onModelUsage?: (event: RuntimeModelUsageEvent) => void | Promise<void>,
   context?: NoteAnalysisContext
 ): Promise<MagicNoteComment[]> {
   const input = canvasAnalysisInput(entry.content, options, context?.supportsImageInput === true, context?.canvasPageCount)
@@ -328,7 +328,7 @@ export async function analyzeMagicNoteDraft(
   plainText: string,
   options: MagicNoteAnalysisOptions,
   onText?: (delta: string) => void,
-  onModelUsage?: (event: RuntimeModelUsageEvent) => void,
+  onModelUsage?: (event: RuntimeModelUsageEvent) => void | Promise<void>,
   context?: NoteAnalysisContext
 ): Promise<MagicNoteComment[]> {
   const input = canvasAnalysisInput(context?.content, options, context?.supportsImageInput === true, context?.canvasPageCount)
@@ -352,7 +352,7 @@ export async function analyzeMagicTodo(
   todo: MagicTodoItem,
   options: MagicNoteAnalysisOptions,
   onText?: (delta: string) => void,
-  onModelUsage?: (event: RuntimeModelUsageEvent) => void,
+  onModelUsage?: (event: RuntimeModelUsageEvent) => void | Promise<void>,
   context?: NoteAnalysisContext
 ): Promise<MagicNoteComment[]> {
   const input = canvasAnalysisInput(