feat(round2+round3): 完整实现 A/B/C/D 主线 + round3-F/H 修复

Round2 主线:
- A: 事件落库地基 (RuntimeApp EventStore 单例 + 14 repo wiring)
- B: 执行体对齐 (read-before-edit, verification-before-completion)
- C: 界面对齐 (@opentui/solid, 删除 runtime 依赖)
- D: 经验闭环 (ExperienceMiner, DebuggerRole, CompactorRole)

Round2 补充修复:
- fail-on-missing 反作弊门禁
- projection-store-apply.test.ts 补写
- 3个空壳测试转行为 (evidence-store, recovery-impl, knowledge-store)
- ask 项目根支持 AIRCODING_PROJECT_ROOT
- Worker 事件契约修复 (task.attempt.started → checkpoint)

Round3-F: cpp 工具切换
- 删除 BuiltInToolRegistrar cpp.* 闭包
- 接入 toolchain-cpp 真实 CppToolRegistrar
- canonical envelope {status/output/metadata}
- ExecutorRole system prompt 对齐新工具名

Round3-H: Doctor 5 类报告
- toolchain (cmake/ninja/cppcheck/clangd/g++)
- display (X11/Wayland + ImageMagick)
- network (internet connectivity)
- provider (api_key/base_url/model/connectivity)

Secret 脱敏:
- 状态交接.md: sk- → \${OPENAI_API_KEY}
- .gitignore: 添加 .air/ .claude/

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

packages/workers/src/roles/ExecutorRole.ts

@@ -30,7 +30,7 @@ export class ExecutorRole {
   }
 
   async run(task_spec: { id: string; title: string; description: string; acceptance_criteria: string[] }): Promise<ExecutorResult> {
-    this.runtime.emit('task.attempt.started', { task_id: task_spec.id })
+    this.runtime.checkpoint('task_attempt_started', { task_id: task_spec.id })
 
     const model = (task_spec as any).model || process.env.AIRCODING_MODEL || 'glm-5.1'
     const projectRoot = process.env.AIRCODING_PROJECT_ROOT || '.'
@@ -41,7 +41,10 @@ export class ExecutorRole {
           role: 'system',
           content: `You are an AI coding assistant. Complete coding tasks by writing code files.
 
-Use structured tool calls whenever possible. Available tools include fs.read, fs.write, fs.edit, fs.list, shell.run, cpp.detect, cpp.build, and cpp.test.
+Use structured tool calls whenever possible. Available tools include:
+  - fs.read, fs.write, fs.edit, fs.list — filesystem operations
+  - shell.run — shell command execution
+  - cpp.detect, cpp.configure, cpp.build, cpp.test, cpp.cppcheck, cpp.clangd — C++ toolchain
 
 If native tools are unavailable, output strict JSON tool calls only in this form:
 
@@ -201,10 +204,6 @@ After all required files are written and required verification has passed, write
       }
 
     } catch (error) {
-      this.runtime.emit('task.blocked', {
-        task_id: task_spec.id,
-        error: error instanceof Error ? error.message : String(error)
-      })
       return { status: 'blocked', error: error instanceof Error ? error.message : String(error) }
     }
   }