feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

test/helpers/entitlement.ts

@@ -5,7 +5,11 @@ export function unlockProForTests(): void {
   useEntitlementStore.setState({
     plan: 'pro',
     deviceId: 'test-device',
+    email: '',
+    licenseKey: 'LIC-TEST',
     expiresAt: null,
+    maxDevices: 5,
+    planType: 'perpetual',
     features: ['*'],
     loaded: true,
     wall: { open: false },
@@ -16,7 +20,11 @@ export function resetEntitlementForTests(): void {
   useEntitlementStore.setState({
     plan: 'free',
     deviceId: 'test-device',
+    email: '',
+    licenseKey: '',
     expiresAt: null,
+    maxDevices: null,
+    planType: null,
     features: [],
     loaded: true,
     wall: { open: false },