fix: skip repeated OpenCode binary validation

OpenCode startup on Linux ARM could run a --version probe before launching the configured Runtime and recheck registered remote binary metadata. Execution now trusts the selected path and registered manifest identity after setup-time verification, so switching and cold launch avoid duplicate binary work.

Release note: 优化 Linux ARM 上切换 OpenCode 的启动速度；已安装或已登记的 Runtime 在执行时不再重复启动或检查二进制。

src/shared/node/runtime-bundle-verifier.ts

@@ -233,7 +233,7 @@ export async function verifyPublishedRuntimeBundle(
 /**
  * Reconstructs a Runtime identity that was fully verified when it was
  * registered. Normal capabilities and prompt launches use this bounded
- * metadata path instead of hashing the complete Runtime payload again.
+ * metadata path instead of re-verifying or executing the Runtime binary.
  */
 export async function loadRegisteredRuntimeBundle(
   bundleDirectoryInput: string,
@@ -242,12 +242,50 @@ export async function loadRegisteredRuntimeBundle(
   const registered = runtimeRegistryEntrySchema.parse(
     options.registered
   )
-  const verified = await verifyPublishedRuntimeBundle(
-    bundleDirectoryInput,
+  const bundleDirectory = assertAbsoluteManagedPath(
+    resolve(bundleDirectoryInput)
+  )
+  const rootStat = await lstat(bundleDirectory)
+  assertOwnedDirectory(
+    rootStat,
+    'Runtime bundle directory',
+    options.uid
+  )
+  if (
+    shouldEnforceMode(options) &&
+    modeString(rootStat.mode) !== '0700'
+  ) {
+    throw new Error('Runtime bundle directory permissions must be 0700')
+  }
+  const manifestBytes = await readMetadataFile(
+    join(bundleDirectory, MANIFEST_FILE_NAME),
+    'Runtime manifest',
     options
   )
-  const { manifest, manifestDigest } = verified
+  let value: unknown
+  try {
+    value = JSON.parse(manifestBytes.toString('utf8'))
+  } catch (error) {
+    throw new Error('Runtime manifest is invalid JSON', {
+      cause: error
+    })
+  }
+  const manifest = remoteRuntimeBundleManifestSchema.parse(value)
+  if (!canonicalRuntimeManifestBytes(manifest).equals(manifestBytes)) {
+    throw new Error(
+      'Runtime manifest is not in canonical deterministic form'
+    )
+  }
+  assertRuntimeManifestMatchesLock(
+    manifest,
+    remoteRuntimeLockSchema.parse(options.runtimeLock),
+    options.architecture
+  )
+  const manifestDigest =
+    await digestRemoteRuntimeBundleManifest(manifest)
   if (
+    basename(bundleDirectory) !==
+      registered.bundleDigest.slice('sha256:'.length) ||
     manifest.runtimeId !== registered.runtimeId ||
     manifest.runtimeVersion !== registered.runtimeVersion ||
     manifest.architecture !== registered.architecture ||
@@ -265,7 +303,15 @@ export async function loadRegisteredRuntimeBundle(
     )
   }
 
-  return verified
+  return {
+    bundleDirectory,
+    executablePath: join(
+      bundleDirectory,
+      ...manifest.entrypoint.path.split('/')
+    ),
+    manifest,
+    manifestDigest
+  }
 }
 
 export function canonicalRuntimeManifestBytes(