Introduce repository-backed capability workspaces

- define and validate the capability and resource-lock languages
- provision workspace source repositories through Central Gitea
- build package runtimes from pinned standalone sources
- replace legacy schema compilation with workspace persistence plans
- add stable optimistic registers and Automerge CRDT documents
- modernize TypeScript/Nix package builds and runtime activation readiness

quixos-package-helpers.nix

@@ -521,7 +521,6 @@ EOF
       promptName ? null,
       nodejsAttr ? "nodejs_24",
       buildCommand ? "yarn build",
-      sourcePortals ? { },
       buildEnv ? { },
       nativeBuildInputs ? [ ],
       devShellPackages ? [ ],
@@ -561,13 +560,6 @@ EOF
               attrs
           );
 
-        portalLinksFor = attrs:
-          lib.concatStringsSep "\n" (
-            lib.mapAttrsToList
-              (target: source: "ln -sfn ${source} ${lib.escapeShellArg target}")
-              attrs
-          );
-
         bundleConfig = if bundle == null then { } else bundle;
         bundleOutfile = bundleConfig.outfile or "server.mjs";
         bundlePlatform = bundleConfig.platform or "node";
@@ -639,9 +631,6 @@ EOF
               (old.nativeBuildInputs or [ ])
               ++ lib.optional (bundle != null) pkgs.esbuild
               ++ callOption nativeBuildInputs;
-            preConfigure = (old.preConfigure or "") + ''
-              ${portalLinksFor (callOption sourcePortals)}
-            '';
             buildPhase = ''
               runHook preBuild
               ${exportsFor (callOption buildEnv)}
@@ -681,7 +670,7 @@ EOF
         devShells.default = pkgs.mkShell {
           packages = [
             nodejs
-            pkgs.yarn-berry_4
+            project.yarn-freestanding
           ] ++ callOption devShellPackages;
           shellHook = devShellHookBase + callOption devShellHook;
         };