fix(desktop): localize expected errors

[orangeCatDeveloper]

Summary

Desktop surfaces rendered raw exception text as user-facing copy: a zh user hitting an expected failure saw an untranslated English error.message, and unexpected exceptions could leak internal details into toasts and error banners. Producers (guest-session mounts, Work Board IPC, WorkHub controller, the Runtime's session-control guards, the composer attachment pipeline) now return machine-readable codes — { code, params } where a message needs data — and the renderer maps codes through the locale catalogs. Expected failures throw a typed ExpectedOperationError; everything else logs a redacted diagnostic and shows a localized fallback. This also deletes WorkHub's English-message-regex classifier and the MAKA_SESSION_READ_MESSAGES_ERROR marker protocol.

Per review, the global error mapper is split: each domain maps its own code union at its presenter; the ExpectedOperationError transport and redacted diagnostics live once in @maka/ui, with an application contract as the renderer-side entry. The Runtime's 8 session-control guards and 11 attachment validations reject with stable session_control_blocked:<code> / attachment_ingest:<code> tokens that survive IPC wrapping (the CLI reason-token convention), mapped bilingually at the shared localizedShellErrorMessage entry — both locales previously lost these reasons to a generic fallback. Structured {ok, code} envelopes replacing the token convention are tracked as a follow-up (both serialization boundaries strip custom Error fields, so envelopes require send-contract changes with Host version-skew handling).

Refs #2672
Depends on #4581: conversation-copy.ts keys its Work Board error records off the IPC contract's code union via a type-only import, which the pre-#4581 ratchet prices as debt.

Verification

Before (zh UI, stale Work Board write / import over mount limit — raw English internals):

Work Board item wb-01 revision changed from 1 to 3
At most 12 shared Sessions can be retained

After (same failures; raw detail now only in the redacted console diagnostic):

工作板内容已更新，请刷新后重试。
共享 Session 数量已达上限。

apps/desktop full dist suite:   1989 pass / 0 fail
typecheck (4 tsconfigs):        0 errors
renderer architecture check:    passes under the #4581 checker
repo format:check:              no issues

AI use

Select exactly one:

• No generative tool made a substantive contribution
• Generative tooling made a substantive contribution

Tool(s) and scope: Claude Code — analysis, implementation, tests, and this description, under the contributor's direction; the commit carries a Generated-by: Claude Code trailer.

Checklist

• Tests cover the change and fail without it

[orangeCatDeveloper]

Converting to draft: blocked on the copy-gate/architecture-ratchet collision described in #2672 (comment) — #4493 resolves the checker policy; this branch then rebases (and splits the global error mapper per review). Will mark ready once green.