[codex] harden plugin runtime and IPC payload adapters

[dengyie]

Summary

This draft PR publishes the current codex/deep-runtime-fixes branch to GitHub. Because GitHub main is behind the local main lineage, this PR currently includes the accumulated local runtime split work plus the latest runtime hardening and adapter fixes.

Commit scope

• refactor(phase-1): extract bootstrap and plugin runtime primitives
• refactor(phase-2): split ipc groups and plugin state views
• refactor(phase-3): split ipc domains and plugin runtime control
• refactor(phase-4): split plugin command runtime
• fix(runtime): harden plugin runtime boundaries
• refactor(phase-runtime-adapters): normalize runtime ipc payloads
• fix(phase-runtime-adapters): preserve pet chat behavior payload

Latest changes

• Adds single-flight startup protection for the plugin command bridge server.
• Wires plugin service/setup/command runtimes through the shared runtime registry.
• Normalizes renderer-facing plugin runtime operation payloads for command, setup, dashboard, service lifecycle, service health, health policy, and clear-storage responses.
• Normalizes pet chat state and message responses through Control Center adapters.
• Preserves safe AiChatResponse.behavior fields while stripping raw replay/provider/internal fields.
• Adds regression coverage for secret/token/raw prompt/local path stripping.

Validation

• node --test tests/main/control-center-adapters.test.js tests/main/ipc-plugin-install.test.js tests/main/pet-chat-ipc.test.js passed: 59/59
• npm run check:syntax passed, including JS syntax check, tsc --noEmit, and Control Center build
• npm run test:core passed: 801/801

Notes

Manual release evidence remains out of scope: signed macOS evidence, notarization/Gatekeeper, real Windows signed smoke, provider account verification, and human desktop feel review still require external/manual validation.

[dengyie]

Repository presentation update pushed in d8d558cf:

• Strengthened English and Chinese README positioning with honest macOS-first / Windows-not-ready boundaries.
• Added .github/REPOSITORY_PROFILE.md for GitHub About text, topics, recommendation blurbs, and release/social copy.
• Added package metadata (homepage, repository, bugs, keywords) for GitHub/npm-style project discovery.
• Validation: npm run check:docs-drift, package.json parse check, and git diff --check passed.