feat: complete v1.9.0 runtime workflows

[weidonglang]

Summary

• redesign Runtime into Java, Python, Node, Go, Maven, Gradle, Rust, .NET, and Other groups with explicit managed/external/current authority
• make installs verification-first and non-switching; add backend-bound switch plans, backup, token execution, state-drift rejection, post-switch checks, and rollback
• add unified command-level runtime verification and report export
• add durable Profile history snapshots with plan/token restore and backup receipts
• extend acceptance fixtures, selectors, drift checks, and data/action contracts for v1.9.0

User impact

Runtime operations now show what is managed, what is external and read-only, which version is effective, and exactly why verification succeeds or fails. Installing a runtime no longer changes the current environment automatically. Profile changes can be reviewed and restored from durable history.

Validation

• Rust: 214 passed, 0 failed
• Clippy: passed with -D warnings
• Frontend production build: 113 modules
• Frontend acceptance: 245 selectors
• Static acceptance: 68 passed, 0 failed, 1 manual visual item
• Safe acceptance: 176 passed, 0 failed, 40 policy skips, 5 manual items
• Aggregate acceptance: 246 passed, 0 failed, 40 policy skips, 6 manual items
• Backend/UI drift, Tauri command, frontend data/action/quality/i18n/architecture, safety wording, and repository hygiene checks passed