feat: prove packaged official OMP host

[wolfiesch]

Summary

• reconcile authoritative official OMP JSONL into the T4 transcript without fork-only watermark or live-entry frames
• add an opt-in T4-exclusive official OMP profile authority while preserving the Lycaon bridge as the released default
• prove the compiled t4-host through discovery, attach, prompt, durable JSONL, and T4 wire projection
• run both direct and packaged official OMP proofs in native CI and retain per-platform evidence
• update the capability audit, tracker, compatibility snapshot, and ADR with the remaining cutover boundaries

Safety and compatibility

• official mode requires --omp-authority official --omp-sessions-root <absolute-path>
• ordinary lockless sessions remain view-only; write ownership is claimed only for the explicitly exclusive profile root
• ambiguous dispatched commands remain outcome-unknown and are never automatically replayed
• symlinked or outside-root session paths are rejected
• the released/default desktop path remains the Lycaon authority bridge

Verification

• pnpm verify:official-omp-packaged (official OMP 17.0.6, macOS ARM64)
• pnpm --filter @t4-code/host-service test (325 passed)
• pnpm --filter !@t4-code/flutter -r typecheck
• pnpm --filter !@t4-code/flutter -r test
• pnpm lint
• pnpm check:release
• pnpm check:provenance
• CI path, release-consistency, and ADR-numbering tests

Remaining before default cutover

• add a first-run project registration flow for an empty exclusive profile
• prove the same authority contract in managed session hosts
• verify packaged desktop clients on required platforms before changing the released default

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.