Restore native workspace access and synchronize project organization

[Hydralerne]

What & why

Direct workspaces now give Codex the computer's normal command and network access, while preserving explicit sandbox and approval settings. Login-shell startup also retains inherited tool paths, so tools such as gh remain available in native Mac and root/server workspaces.

• Add daemon-backed project folders, membership, and manual ordering to the Go/TypeScript SDKs and OpenAPI. Revision checks and transactional edits preserve changes across clients and restarts.
• Clean up Mindwire-owned app-server processes after native session ownership conflicts, and distinguish an unavailable CLI version probe from a genuine managed-install mismatch.
• Allow staging and unstaging while an agent or terminal is active, while retaining conflicts for competing Git operations.
• Carry remote cursor state through desktop observations and distinguish cursor-only updates from complete framebuffer captures.
• Advance Docker latest explicitly for stable checked releases; prereleases and manual image builds keep the existing alias.
• Document native access, CLI repair, and project library synchronization.

Component

• daemon (Go)
• mindwire (TypeScript)
• docs
• repo / CI

Type of change

• Bug fix
• New feature
• New agent adapter
• Breaking change
• Docs only

Validation

• Daemon: build, vet, and race suite pass locally. The authenticated external TestLiveClaude case was excluded locally; CI runs the standard unmodified suite.
• SDK: typecheck, build, and unit suite pass.
• Web and console production builds pass, including all 902 generated website pages.
• Native Codex command, environment, network, and resume checks passed on this Mac and an isolated Linux/root workspace; the two-client project-library restart test passed 39 assertions.
• Both changed workflows pass actionlint. Executing the tag resolver covers stable releases, prereleases, manual version/SHA tags, and invalid tags.

Checklist

• I read CONTRIBUTING.md.
• Daemon build, vet, and local tests pass as described above.
• SDK typecheck, build, and test pass.
• I added/updated tests where it made sense.
• I updated docs for behavior changes.