Add activated workspace reflection and Studio definition watches

Expose bounded snapshot-bound definition reads and latest-only watches from the serving checked bundle. Add checked reflection dependency ports, generated SDK bindings and selector-scoped invocation authority.

Move Studio factory, contract and query discovery to public reflection inventories. Share an active-definition watch across canvas and standalone routes and invalidate/reload on epoch changes instead of polling GetWorkspace.

Document the API and deferred scope; cover compiler/codegen, SDK injection, transport authorization, activation publication, pagination and reconnect behavior. Keep all work local; no deployment or publication.

dist/bindings.d.ts

@@ -63,6 +63,10 @@ export type QxOperationSpec = {
     outputType: QxValueType;
 };
 export type QxPortSpec = {
+    kind: "reflection";
+    id: string;
+    selectors: string[];
+} | {
     kind: "query";
     id: string;
     definitionDigest: string;