feat(host): bind execution to resolved native targets

[YayoiNanoka]

Summary

• add the side-effect-free target.resolve contract for running apps, exact windows, and installed launch targets
• bind observations and effects to app identity, PID, process generation, and window ID
• revalidate the native root around reads and immediately before effects
• bump the host protocol directly to maka.cu/3 and remove the obsolete app-target path

This is the native prerequisite for apache/maka#4012.

Validation

• xcrun swiftc -frontend -parse for all changed Swift files
• ./scripts/check-docs.sh
• git diff --check
• focused swift test is blocked locally by the installed Swift 6.3.3 compiler / Swift 6.3.2 SDK mismatch and is left to macOS CI

中文

摘要

• 新增无副作用的 target.resolve，解析运行中的应用、精确窗口和未启动应用
• 将观察与实际操作绑定到应用身份、PID、进程代际和窗口 ID
• 在读取前后以及真实副作用前重新验证 native root
• 协议直接升级到 maka.cu/3，删除旧的 app target 路径

这是 apache/maka#4012 在 native executor 侧的前置改动。

验证

• 所有修改过的 Swift 文件均通过语法解析
• 文档检查和 git diff --check 通过
• 本机 Swift 6.3.3 编译器与 Swift 6.3.2 SDK 不匹配，完整 Swift 测试交由 macOS CI