feat(appserver): expose the thin T4 authority bridge

[wolfiesch]

Outcome

Adds the small OMP-owned authority boundary used by the standalone T4 host: omp bridge --stdio.

Included

• strict versioned JSON-lines bridge with bounded per-message input, cancellation, safe errors, and concrete method advertisement
• session, lock, project-root, operation, terminal, settings, catalog, and usage routing
• exact T4 host-service artifact provenance
• removal of the public legacy omp appserver serve action and ompd binary
• administrative status, drain, pair, devices, and revoke commands retained for the T4-owned socket
• install-smoke lookup through the checksum-pinned vendor manifest

Verification

• fork-wide bun run check:ts
• focused bridge, appserver admin, and vendor-manifest tests
• compiled native OMP build
• all GitHub CI lanes green, including install methods, Linux native builds, Rust, and the full TypeScript test matrix
• paired compiled T4 host Unix-socket end-to-end smoke

Paired with T4 PR #95. A release tag and binary artifact should be produced only after the coordinated merge decision.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.