Add profile-aware handoff

[SunsetWan]

Summary

• add UUID-targeted Prowl Agent Profiles to the Hand Off HUD and prowl handoff to
• resolve and freeze the latest enabled Profile before artifact commit, then launch it through the shared Profile terminal boundary in a background tab
• bind HUD requests to the exact source pane and receiver, preserve Runtime Default inheritance, and return exact launched-pane identity
• retain saved progress on post-commit launch failure while keeping Profile arguments, environment values, home paths, and credentials out of requests, payloads, artifacts, and logs
• document Profile creation, native Codex -p <name> usage, direct CLI lookup, failure semantics, and privacy boundaries

Verification

• make check
• focused Xcode suites for handoff handler/HUD/request ownership/app wiring/Profile planner/terminal state/terminal manager
• swift test --filter HandoffCommandParsingTests (14 passed)
• make build-cli
• make test-cli-smoke
• make test-cli-integration (68 passed)
• make test (2,173 passed, 0 failed)
• make build-app (0 errors, 0 warnings)

The real-GUI self-verify-prowl workflow was not run because the repository skill requires separate explicit opt-in.

[onevcat]

Thanks for the contribution. This is already part of the planned roadmap and will build on #643, which is likely to change the related APIs compared to the current Agent Profile implementation.

Because of that, I can’t merge this PR as-is. Once #643 is merged and the APIs have settled, I’ll revisit this and implement the feature on top of the new architecture. Thanks again for the proposal—it will be a useful reference when I work on it.