feat(tui): modernize activity and approval workflows

[drewstone]

Outcome

• Unify turns, trace analyses, workers, and graph details in one responsive activity browser.
• Keep list context beside details on wide terminals and use full width for a single result.
• Make Left Arrow and Escape equivalent, with arrow selection and Page Up/Page Down detail paging.
• Replace ambiguous approval input with explicit Allow, Approve, Reject, Deny, and Cancel actions.
• Show the effective AgentProfile, runner, model, connection, reasoning effort, output cap, usage, cost, and latency.
• Update runtime/eval dependencies, product documentation, and the real packed-product demo.

Real product proof

The recorder installed package 0.1.0 from archive SHA-256 32f19ba707aa659f776a604fe241111fe2bfb68928ac6f005014d81bd924182c.
The route used Pi 0.83.0, GLM-5.2, and Local CLI Bridge.
Pi changed a real workspace and passed 12/12 tests.
/ask completed 4/4 model calls with 18,407 input tokens, 5,473 output tokens, 99.98 seconds wall time, and estimated cost $0.0231.
The manifest reports tool-event projection as blocked by agent-runtime issue #762 instead of claiming unavailable evidence.

Verification

• pnpm check: 617/619 main tests passed; 2 Tangle-credential cases skipped; 0 failed.
• Performance: 15/15 passed.
• Native SQLite: 2/2 passed; 8,342 events/s at 10k and 7,440 events/s at 100k.
• Demo recorder: 19/19 passed.
• Protected live-contract tests: 11/11 passed.
• CLI Bridge adversarial matrix: passed.
• Module graph: 458 modules, 2,340 edges, 0 cycles.
• Packed parity: RPC, plain mode, four terminal sizes, accessibility settings, and signal cleanup passed.
• Visual proof: 75 artifacts and 11 required states passed hash validation.