feat(runtime-host): enable explicit safe resume by default

[me2seeks]

Summary

Make explicit safe-boundary resume available to TUI and Desktop when
MAKA_RUNTIME_SAFE_BOUNDARY_RESUME is unset, while keeping model-driven
WorkHub resume delegation disabled by default.

A single policy resolver now separates the two authorization boundaries:

• unset: explicit interactive resume enabled; automated delegation disabled
• 1 or true: both enabled
• 0, false, or an unrecognized value: both disabled

The existing Runtime Host planner remains the final safety authority. The
policy only controls whether a caller may request planning; it does not turn a
stopped Run into an automatically resumable Run.

This also updates the TUI copy and the English/Chinese architecture and product
documentation. The startup documentation now distinguishes repair of an
already admitted continuation from selection of an ordinary stopped Run.

Refs #5205

Verification

• npm run rebuild
• Runtime Host suite: 1859 passed, 0 failed, 12 skipped
• Focused production-composition coverage:
  • explicit resume after user Stop is available with no environment variable
  • MAKA_RUNTIME_SAFE_BOUNDARY_RESUME=0 disables explicit resume
  • WorkHub resume delegation remains disabled when the variable is unset
• TUI parked-resume presentation tests
• npm run lint
• npm run format:check
• npm run check:asf-headers
• npm run check:stale
• git diff --check

Hosted CI has not run yet.

Review focus

This changes the default behavior of an operation that may continue spending
tokens. Please review the separation between explicit user authorization and
model-driven WorkHub authorization, including the handling of an existing
durable WorkHub admission.

AI use

Select exactly one:

• No generative tool made a substantive contribution
• Generative tooling made a substantive contribution

Tool(s) and scope: OpenAI Codex traced the resume authorization paths, designed
and implemented the policy boundary, added tests and documentation, and
performed adversarial pre-PR review.

Checklist

• Tests cover the change and fail without it
• Lint, format, typecheck and the affected suites pass locally

Does this PR entail a change in behavior?

• Yes — described under Summary above
• No