feat(remote-dsh): support DSH 0.2 and native projections

[icodesign]

DeepSeek Harness 0.2 changes session messages, projection/cache APIs, and Web exports. Upgrade the plugin and its companion packages to 0.2.0-rc.2, project V4 tool/developer messages, and update raw recording/replay and the Settings client.

Use native sessionQuery.observeSession for consistent live and cold reads, release every observation lease, and consume native plan/goal/todo/model projections instead of maintaining duplicate domain folds. Keep native plan/todo read units available before Web presets open an Agent, with isolated tool/prompt services. DSH owns inbox membership; Orbis retains enqueue timestamps. Remote events and snapshots share the controller's revision.

Catalog listing stays header-only and uses cached titles for ordinary and forked sessions. Raw replay now requires recording format 2 / Session format 4; the supported host line is DSH 0.2.

Includes a minor changeset for @orbisapp/remote-dsh (0.3.0 → 0.4.0). Package versions remain under the release workflow.

Validation, run on this branch in an isolated checkout of current main:

• pnpm install --frozen-lockfile --ignore-scripts
• pnpm run check:core
• pnpm run check:dsh — publishable bundle, production/test typechecks, 27 test files / 178 tests
• Strict keyless e2e:real — real DSH Web/profile/Agent, AuthPSK pairing, actual Bash execution and V4 tool result, model selection/idempotency, native scoped plan commands, live/cold projections, streaming/settlement, cursor replay and restart recovery
• Changeset status confirms 0.4.0; changed TypeScript files pass Oxfmt/Oxlint and git diff --check

The E2E uses DSH's official LLM replay adapter; live-provider and mobile UI behavior were not exercised. Host identity rotation was skipped because the disposable credentials service did not persist .env.