feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

shared/types/sftp.types.ts

@@ -19,6 +19,8 @@ export interface TransferTask {
   type: 'upload' | 'download'
   fileName: string
   filePath: string
+  /** Destination directory (remote for upload, local for download). */
+  destinationDir?: string
   status: 'pending' | 'transferring' | 'completed' | 'failed' | 'canceled'
   progress: number
   error?: string