feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/acceptance.mjs

@@ -17,7 +17,7 @@ const manifest = 'src-tauri/Cargo.toml'
 const quickSteps = [
   ['Renderer type contract', npm, ['run', 'typecheck:ui']],
   ['Test and mock contracts', npm, ['run', 'typecheck:test']],
-  ['Unit and foundation smoke tests', npm, ['test']],
+  ['Unit + SSH/SFTP/RDP/VNC patrol', npm, ['test']],
   ['Rust formatting', cargo, ['fmt', '--manifest-path', manifest, '--', '--check']],
   ['Rust compile check', cargo, ['check', '--manifest-path', manifest]],
 ]