fix(api): carry roles through typed reads and deletes

[LiranCohen]

Summary

• expose from and protocolRole on typed record reads and protocolRole on typed record deletes
• forward the invoked protocol role through remote reads and deletes, including delegate-grant selection
• retain the invoked role on returned records so repeated lazy data reads use the same authorization
• document remote nested reads/deletes with { from, protocolRole, within } and clarify what Record.protocolRole retains

Closes #1467.

Test plan

• isolated current-head remote role read/delete integration test (10 passing)
• typed protocol suite (72 passing)
• API dependency build and contract type-check
• Agent build and full Agent suite (1,675 passing, 18 skipped)
• bun run lint

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[LiranCohen]

Addressed the review note in 3c3612c2 and brought the branch current with main without rewriting history.

• corrected the multiline test object's visual alignment;
• added concise remote nested read/delete examples using { from, protocolRole, within } to the exported request types;
• corrected Record.protocolRole documentation to describe the role carried by the producing request and reused by follow-up operations.

Verification: typed protocol tests 72/72, root/API lint, API build and contract typecheck, Agent build, and the full Agent suite (1,675 passing, 18 skipped). CI is fully green, including Sonar and CodeQL.