feat(runtime): port discovery, Qoder/TRAE, model catalog, overrides, trust preseed from main (0046 M3.5)

[yicheng47]

0046 M3.5 — the runtimes slice: seven main commits (d23e065, 40e4bd1, cc97ab5, d4c082f, 3f58c29, f3a4071, 1b7ee92; port guides 0033/0034/0036/0043/0045).

What ported

• Non-blocking executable discovery seeded from the persisted login-shell LKG env; refresh/override/status ops emit runtime/changed; all spawn paths resolve catalog commands while preserving custom runner commands.
• Qoder + TRAE end to end: registry, permission/model/effort argv adapters, resume + rollout-capture paths, MCP config, resize/resume output policies, availability-aware selectable catalog.
• Backend-owned model + effort option tables (ready for the native Start Chat modal); direct-chat runtime/model/effort overrides; slot model/effort layering matching main; codex project trust pre-seeded before each spawn.

Deferred

React settings/picker components — no native settings surface or modal yet; the next task (StartChatModal) consumes this backend as-is.

Verification

• make verify green: 496 backend tests + app/CLI/core/terminal suites, clippy -D warnings, fmt-check, 10/10 terminal fixtures.
• Codex-peer review clean, no must-fix; reviewer independently re-ran tests/clippy and diffed every ported file against origin/main (byte-identical modulo the ops/EventChannel seam).
• Human smoke test intentionally deferred to the modal task, which exposes this slice's surface.

Also in this PR

• docs: post-cutover session-daemon direction pinned in the plan; M3.5 log entry; current-state refresh.

🤖 Generated with Claude Code