feat(core): update tokenless workflows and supporting modules

[jazelly]

• Route implicit runs through cached usable provider observations instead of a fixed provider.
• Make setup and doctor report provider access without treating sign-in state or a stopped on-demand runtime as damage.
• Harden graceful daemon shutdown and real-browser profile release between provider cases.
• Classify only durable Claude Cloudflare Turnstile or interstitial blockers as a known-issue live E2E skip.
• Expand bilingual CLI guidance, privacy notes, architecture documentation, and active roadmaps.
• Restore Node 22.13 and Node 24 conformance checks for pull requests targeting dev or main.