feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

.gitignore

@@ -52,5 +52,6 @@ src-tauri/target/
 *.sqlite
 *.sqlite3
 
-# ZCode workspace
+# Local agent / IDE workspace
 .zcode/
+.claude/