Add activated workspace reflection and Studio definition watches

Expose bounded snapshot-bound definition reads and latest-only watches from the serving checked bundle. Add checked reflection dependency ports, generated SDK bindings and selector-scoped invocation authority.

Move Studio factory, contract and query discovery to public reflection inventories. Share an active-definition watch across canvas and standalone routes and invalidate/reload on epoch changes instead of polling GetWorkspace.

Document the API and deferred scope; cover compiler/codegen, SDK injection, transport authorization, activation publication, pagination and reconnect behavior. Keep all work local; no deployment or publication.

src/capability-model/generic-packages.ts

@@ -22,7 +22,7 @@ import {
 
 export type GenericDependencyPort = Omit<DependencyPort, "requirement"> & {
   requirement:
-    | Extract<DependencyPort["requirement"], { kind: "query" }>
+    | Extract<DependencyPort["requirement"], { kind: "query" | "reflection" }>
     | {
         kind: "state";
         valueType: ValueTypeExpression;
@@ -80,6 +80,7 @@ export const specializePackageExport = (
   const ports: DependencyPort[] = definition.dependencyPorts.map((port) => {
     const requirement = port.requirement;
     switch (requirement.kind) {
+      case "reflection":
       case "query":
         return { ...port, requirement };
       case "state":