feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/components/sessions/WelcomeView.tsx

@@ -10,7 +10,11 @@ import { openLocalShellTab, type ShellOption } from '../layout/sidebar/LocalShel
 import appIconUrl from '../../assets/opsxshell-app-icon.png'
 import { shellDisplayFromPath } from '../../utils/shellName'
 import { fallbackLocalShells, modKeyLabel } from '../../utils/platformShells'
-import { buildOpenTabPayload } from '../../utils/sessionProtocol'
+import {
+  buildOpenTabPayload,
+  defaultPortForProtocol,
+  sessionProtocol,
+} from '../../utils/sessionProtocol'
 
 interface WelcomeViewProps {
   onNewSession?: () => void
@@ -273,7 +277,8 @@ export default function WelcomeView({
                     <span className="min-w-0 flex-1">
                       <span className="block truncate text-sm text-content-primary">{session.name}</span>
                       <span className="block truncate font-mono text-[11px] text-txt-faint">
-                        {session.username}@{session.host}:{session.port || 22}
+                        {session.username}@{session.host}:
+                        {session.port || defaultPortForProtocol(sessionProtocol(session))}
                       </span>
                     </span>
                     {session.group ? (