Add session-scoped recorded terminal

[adilei]

Summary

• add a cross-platform, app-owned recorded terminal launched from the floating recording bar
• capture command metadata and full PTY output only for the active recording session, with local sensitive-data scanning and bounded redacted analysis tools
• support zsh, Bash, fish, PowerShell 7, and Windows PowerShell without global hooks or shell-profile changes
• improve shell switching, terminal lifecycle cleanup, privacy disclosure, compliance checks, and terminal-focused evals
• make generated skill plans distinguish runtime tool IDs from allowed-tool permissions and display human-readable tool labels

Validation

• npm test --silent
• npm run build --silent
• npm run typecheck:evals --silent
• terminal eval scenarios: 3/3 passed
• native zsh, Bash, and PowerShell 7 PTY smoke tests passed on macOS

Platform notes

• runtime capture is session-scoped: no keylogger, global shell hook, profile modification, or observation of existing terminals
• fish and Windows shell execution remain covered by implementation/tests and require their native CI hosts for runtime smoke validation