feat: add persistent agent multiplexing and profiles

[aksOps]

Summary

• add protocol v2 persistent attach multiplexing with controller and observer roles
• add schema v4 profiles, effective configuration, CLI/TUI surfaces, migration, and doctor diagnostics
• add provider terminal policies, compatibility harnesses, responsive TUI documentation, and release smoke tooling
• fix OpenCode paste by making mouse capture explicitly toggleable during attach
• harden helper readiness under coverage with a dedicated file descriptor and reject poll file descriptors that exceed int32

Verification

• go test -race -count=1 -covermode=atomic -coverpkg=./... -coverprofile=/tmp/uam-release-coverage.out ./... (88.3%)
• gofmt -l .
• go vet ./...
• staticcheck ./...
• golangci-lint run ./...
• govulncheck ./... (no reachable vulnerabilities)
• gosec ./... (0 issues)
• goreleaser check
• make build
• script/qa/docs-contract-smoke.sh
• live OpenCode 1.18.4 attach/paste QA with mouse capture toggled off

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​xterm/​xterm@​6.0.0

View full report