fix: integrate audit findings round 1 - tools, worker, scheduler, main agent

- Unify ToolResultEnvelope (output vs content) for built-in tools
- Fix shell.run AsyncGenerator consumption in ToolRegistry.call/streaming
- Scheduler: consume WorkerResult.status instead of marking all running tasks completed
- WorkerProcess/WorkerManager: surface exit events and generate failed/cancelled result
- MainAgent: integrate ContextAssembler, Chinese destructive regex, ArchitectureDesigner impact gate
- run.ts: pendingConfirmation flow, dispatch extracted, .air files filtered from /results
- CapabilityRegistry wired into RuntimeApp and ServiceRegistry; DoctorService uses it
- release.ts: findRepoRoot/findBun, run air e2e + depcruise + runtime regression
- New gates: release-critical-gates, CLI run command regression
- 14/14 e2e gates pass; 3/3 release dry-run pass

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

packages/runtime/test/regression/tool-registry-permission.test.ts

@@ -49,4 +49,11 @@ describe('A5+A4: ToolRegistry permission fixes', () => {
     expect(build_match![0]).toContain('context.permission_profile')
     expect(build_match![0]).not.toMatch(/permission_profile:\s*undefined/)
   })
+
+  it('permission denial branches preserve original call_id', () => {
+    expect(src).toContain("create_error_result(call.call_id, 'user_prompt_required'")
+    expect(src).toContain("create_error_result(call.call_id, 'permission_denied'")
+    expect(src).not.toContain("create_error_result('', 'user_prompt_required'")
+    expect(src).not.toContain("create_error_result('', 'permission_denied'")
+  })
 })