feat(ground-study): add imported-job execution workspaces

[d-sorgcodexagent]

What changed

• add one App-owned React regional-ground execution workspace with strict bounded job import, exact evidence, explicit confirmation, Run/Cancel/progress, request reconciliation, typed terminal outcomes, and canonical JSON/CSV downloads
• add a dedicated PyQt6 Ground Study workspace with strict import, QThread execution and cooperative cancellation, safe error presentation, atomic persistence, and source-standalone injection of the qualified direct Python runner
• register matched contextual File commands, navigation/help surfaces, lifecycle-safe shutdown, and current handoff/spec/release evidence
• harden the React execution controller against duplicate submission, ambiguous remote ownership, active-job replacement, stale async imports, and job-not-found recovery

Scope boundaries

This slice executes only an exact imported regional-ground-execution-job/v1. It does not construct a job from current editor state, run physics in TypeScript, persist remote lifecycle across restart, qualify static hosting or frozen PyQt distributions, prove compiled/downstream parity, or complete the protected release.

Validation

• 100 composed focused PyQt/API tests passed after parent composition, including a real exact-profile production-runner smoke
• complete React suite: 875 passed across 135 files
• strict TypeScript, zero-warning ESLint, and production Vite build passed
• pinned MyPy 1.13 CI-equivalent source checks, Ruff lint/format, Black, high-severity Bandit, diff hygiene, campaign manifest, docs governance, module budget, and changed-file budget passed

Stack

Targets codex/4369-ground-authority-capability at exact parent head 86adb42323ea210d1b4f85242abe51c7db06a5e9. Human review is recorded as approved; ordinary protected checks and ancestor dependency order remain authoritative.

[dieterolson]

Consolidated into #4409. Closing to reduce CI/CD runner load.