[hhuumm]

Summary

• scope every PM, task, agent, knowledge, run, and runtime operation to an explicit project ID
• serialize turns within one Project Manager while allowing different projects to think concurrently
• onboard existing local Git checkouts or asynchronously clone HTTPS/SSH remotes
• keep onboarding metadata local through Git's info/exclude and reject embedded URL credentials
• add GitHub CLI browser authentication with redacted account status and no token storage in CodePilot
• gate branch pushes and pull-request creation behind both a global write opt-in and an explicit per-run publication choice
• surface PM and worker activity across the project registry

Verification

• npm run check (51 tests)
• npm --prefix desktop run typecheck
• npm run desktop:build
• live GitHub CLI status parsing against the connected account without retaining token output

Delivery note

This PR is stacked on #11 (feature/git-native-delivery). After #11 merges, its base can be changed to main without changing this feature commit.