fix: recover desktop authentication and improve update diagnostics

[pallyoung]

Summary

• improve the product update version display and component diagnostics UI
• recover Desktop session authentication after Electron Network Service restarts
• preserve normal WebSocket reconnect backoff when authentication is already valid
• auto-hide the native application menu bar while keeping it available through Alt
• add patch changesets for the Product Runtime/CLI and Desktop Shell release lines

Root cause

Electron Network Service restarts can drop the managed Desktop session cookie while the backend remains healthy. The renderer previously had no Shell bridge to restore that session. The initial recovery path also treated an already-valid session as newly recovered, which could reset the WebSocket reconnect backoff during unrelated WS failures.

Impact

The Desktop Shell can reauthenticate its managed browser session and notify the Web client to reconnect only when appropriate. Runtime update diagnostics are clearer, and the unused native menu no longer consumes persistent window space.

Validation

• Desktop tests: 200 passed, 1 skipped
• affected Web tests: 69 passed
• full Web suite: 2594 passed, 1 Windows CRLF-sensitive test failed
• full typecheck passed
• production build passed
• changed-file Biome checks and changeset validation passed

Local full-repository lint/script checks remain blocked by the Windows checkout's CRLF conversion, symlink permissions, and POSIX-specific path/execute-bit assertions; Linux CI is the release gate.