feat: replace the OMP-hosted appserver with the T4 host

[wolfiesch]

Outcome

Moves the generic appserver process into a standalone t4-host executable owned and packaged by T4. OMP is now invoked through a strict versioned stdio bridge for session authority and as one RPC worker per active session.

Rollout

There are no live users, so this directly replaces the existing service definition instead of dual-running hosts or preserving mixed runtime versions. The service label and local socket remain stable. Rollback stays at the Git/release level.

Included

• strict t4-omp-authority/1 client with bounded frames, immediate cancellation, safe errors, and advertised-method checks
• standalone native host executable with T4-owned profile state and complete failed-startup cleanup
• desktop discovery that rejects legacy OMP runtimes without omp bridge --stdio
• same-install OMP RPC worker invocation
• packaged-host inspection and distribution-signing gates
• direct-replacement rollout and ownership documentation

Runtime provenance

• OMP integration: lyc-aon/oh-my-pi#23, merged as 8476f4451ed95c5d5401785d279a93d3c659fac4
• immutable tag: t4code-17.0.5-appserver-10
• macOS arm64 artifact SHA-256: f7d4438e163aabc4ca624468bf5bd4a243b5e1ab5360e84cef52abe93683ea55
• upstream OMP artifacts are ad-hoc signed; the protected T4 product package remains the Developer ID signing boundary for both t4-host and OMP
• public v0.1.30 metadata remains pinned to appserver-9 until the next T4 product release promotes this verified runtime

Verification

• pnpm check
• tooling/integration: 304 tests, 302 passed, 2 platform skips
• desktop: 171 passed
• focused lifecycle/service merge coverage: 52 passed
• compiled OMP bridge ready frame verified from the released macOS arm64 artifact
• OMP tag CI and release publication succeeded

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.