Add the workspace coding agent, launch gate, and composable locks

- run a singleton Codex App Server adapter in each dev workspace
- gate Web Studio with a reloadable fragment-token to HttpOnly-session exchange
- add ChatGPT device login and streamed chat to Web Studio
- isolate authoring access in a declarative NixOS service account
- split Web Studio canvas, object, panel, and model concerns
- check generated Quixos protocol clients for drift
- resolve same-repository quixos.lock fragments deterministically
- preserve the collaborative canvas gesture fixes

dist/quixos/refs_pb.d.ts

@@ -65,10 +65,10 @@ export type InjectedDependency = Message<"quixos.InjectedDependency"> & {
         case: "edge";
     } | {
         /**
-         * @generated from field: string receiver_interface_revision_id = 4;
+         * @generated from field: string interface_revision_id = 4;
          */
         value: string;
-        case: "receiverInterfaceRevisionId";
+        case: "interfaceRevisionId";
     } | {
         /**
          * @generated from field: string constructor_atom_id = 5;