Bootstrap workflows with the kernel-selected identity

[Shooksie]

What changed

• Add execute --new-workflow-id for an idempotent fresh workflow bootstrap.
• Reject simultaneous fresh and resume IDs.
• Create the durable journal row through run_with_id when the daemon supplies an ID.
• Keep the stdio plugin wire behavior unchanged.

Why

The queue and runner previously minted independent UUIDs, guaranteeing a split between the queue entry and durable workflow journal for daemon-dispatched work.

Impact

The runner can now create or reconcile the exact workflow ID selected before queue lease. This runner release must precede the Animus release that emits the new flag.

Validation

• Full cargo test: 293 passed, 5 known ignored, 0 failed
• New argument regressions passed
• git diff --check

[animus-launchapp-gitprovider]

VERDICT: APPROVE

No blocking findings. The new --new-workflow-id path is kept distinct from resume semantics, rejects ambiguous simultaneous IDs, propagates the kernel-selected ID into startup events, and uses WorkflowServiceApi::run_with_id while leaving the stdio request path unchanged. The focused parser regressions cover acceptance and mutual exclusion, and the Rust quality gate completed successfully.

What is good: the diff is small and release-order aware; it addresses the queue/journal identity split at the exact direct-execution boundary without changing the public plugin wire contract.