feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

test/ai/providerPresets.test.ts

@@ -17,10 +17,10 @@ describe('AI provider presets grouping', () => {
       'local',
       'custom',
     ])
-    expect(AI_PROVIDER_FAMILY_META.openai_compatible.label).toBe('OpenAI兼容')
-    expect(AI_PROVIDER_FAMILY_META.plan.label).toBe('Plan计划')
-    expect(AI_PROVIDER_FAMILY_META.local.label).toBe('私有化本地')
-    expect(AI_PROVIDER_FAMILY_META.custom.label).toBe('Custom自定义')
+    expect(AI_PROVIDER_FAMILY_META.openai_compatible.label).toBe('OpenAI compatible')
+    expect(AI_PROVIDER_FAMILY_META.plan.label).toBe('Subscription plans')
+    expect(AI_PROVIDER_FAMILY_META.local.label).toBe('Self-hosted')
+    expect(AI_PROVIDER_FAMILY_META.custom.label).toBe('Custom')
   })
 
   it('lists OpenAI-compatible payg presets', () => {
@@ -70,7 +70,7 @@ describe('AI provider presets grouping', () => {
 
   it('lists local and custom at the bottom', () => {
     expect(presetsByFamily('local').map((item) => item.name)).toEqual(['Ollama', 'VLLM'])
-    expect(presetsByFamily('custom').map((item) => item.name)).toEqual(['Custom自定义'])
+    expect(presetsByFamily('custom').map((item) => item.name)).toEqual(['Custom'])
     expect(createProviderFromPreset('custom').family).toBe('custom')
   })