Add the workspace coding agent, launch gate, and composable locks

- run a singleton Codex App Server adapter in each dev workspace
- gate Web Studio with a reloadable fragment-token to HttpOnly-session exchange
- add ChatGPT device login and streamed chat to Web Studio
- isolate authoring access in a declarative NixOS service account
- split Web Studio canvas, object, panel, and model concerns
- check generated Quixos protocol clients for drift
- resolve same-repository quixos.lock fragments deterministically
- preserve the collaborative canvas gesture fixes

dist/index.d.ts

@@ -38,8 +38,10 @@ export type EdgePort = {
     connect(targetObjectId: string): Promise<void>;
 };
 export type InterfacePort = {
+    objectId: string;
     interfaceRevisionId: string;
     invoke(operationId: string, input?: Record<string, unknown>): Promise<unknown>;
+    live(operationId: string, input?: Record<string, unknown>): Promise<ReturnType<typeof liveValue>>;
 };
 export type ConstructorPort = {
     atomId: string;