feat(runtime-host): add OpenRC lifecycle provider

[M4n5ter]

English

Summary

Adds canonical openrc_user and openrc_system lifecycle providers backed by supervise-daemon. The exact Runtime Host package and the stable-operator reconciliation loop are installed as one transactional projection; discovery uses actual system capabilities, persists the selected provider, and never invokes sudo.

Fresh supervised setup now discovers its canonical provider without first constructing the legacy systemd backend, which otherwise made OpenRC unreachable on Alpine.

Fixes #3984

Verification

• npm run lint
• npm run format:check
• npm run build
• npm run typecheck
• npm --workspace maka-agent run test:dist — 750 passed, 3 skipped
• Alpine OpenRC smoke — install, enable, start, PID/status, crash respawn, logs, stop, and uninstall

AI use

Select exactly one:

• No generative tool made a substantive contribution
• Generative tooling made a substantive contribution

Tool(s) and scope: OpenAI Codex implemented, reviewed, and verified the change. The commit includes the required Generated-by trailer.

Checklist

• Tests cover the change and fail without it
• Lint, format, typecheck and the affected suites pass locally

Does this PR entail a change in behavior?

• Yes — described under Summary above
• No

中文

概要

新增基于 supervise-daemon 的 canonical openrc_user 与 openrc_system 生命周期 provider。精确版本 Runtime Host 与稳定 operator reconciliation loop 作为同一个事务投影安装；provider 按系统实际能力探测并持久化，且绝不隐式调用 sudo。

新的 supervised 安装会直接探测 canonical provider，不再先构造旧 systemd backend，从根因上消除 Alpine 上 OpenRC 尚未探测就被 systemd 路径阻断的问题。

修复 #3984

验证

• npm run lint
• npm run format:check
• npm run build
• npm run typecheck
• npm --workspace maka-agent run test:dist — 750 通过，3 跳过
• Alpine OpenRC 实机链路 — 安装、启用、启动、PID/状态、崩溃重启、日志、停止与卸载

AI 使用

OpenAI Codex 参与了实现、审查与验证；提交已包含要求的 Generated-by trailer。

检查清单

• ✅ 测试覆盖本次变更，且缺少对应实现时会失败
• ✅ lint、format、typecheck 与受影响测试套件均在本地通过
• ✅ 本 PR 改变行为，已在概要中说明

[jackwener]

Approved at exact head 5cb16db229a163606db2e38a5cce1c5124613d29 at the explicit direction of M4n5ter. No technical review was performed as part of this action; M4n5ter requested the approval and accepts responsibility for subsequent handling.

---

Review notice: This approval was submitted by an automated review agent operated by jackwener and is published at the direction of M4n5ter, who requested this action and is the human accountable for it.