fix(runtime): persist external tool effects

[AsperforMias]

Summary

• Require a durable external-effect ledger before MCP provider execution.
• Redeliver saved results after a lost terminal receipt; fence interrupted effects as unknown without a replay.
• Pass a stable MCP idempotency key and preserve provider metadata as an opaque receipt.

Why

• Prevents a Driver restart from duplicating a write-capable MCP call.

Verification

• bun run --filter @mosoo/agent-driver tc
• bun test tests/driver-runtime-boundary-state.test.ts tests/agent-driver-kernel-lifecycle.test.ts
• Root integration: just check; just e2e deterministic session-log

Compatibility

• Driver control protocol moves from v1 to v2; an old Driver is rejected rather than allowed to make an unsafe call.
• Generic MCP has no standardized reconciliation protocol, so unknown effects deliberately fail closed.

Dependency

• The parent Mosoo PR will update its submodule pointer after this lands on fix/openai-app-server-init-stop-race.

[AsperforMias]

driver这边的#89先合