feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/roadmap.md

@@ -0,0 +1,9 @@
+# 路线图
+
+权威副本在仓库根目录：
+
+- [ROADMAP.md](../ROADMAP.md) — 产品方向与下一阶段
+- [TASKS.md](../TASKS.md) — 当前可勾选任务（Hermes / OpenClaw / Cursor）
+- [TDD_PLAN.md](../TDD_PLAN.md) — 测试先行与门禁
+
+开发规则以 [AGENTS.md](../AGENTS.md) 为准。不要在本文件再维护一份进度，避免漂移。