fix(mindspace): edit_file 落盘、Finish 聊天 merge 与回归守卫

- finish-sync 支持 edit_file 覆盖 public HTML
- Finish 同步 merge 本地流式消息，剥离 agent 内部前缀
- 新增 verify:mindspace-publish-guards 与 AGENTS.md 跨工具说明
- 发版脚本接入回归门禁；103 runtime 发布含备份回退

Co-authored-by: Cursor <cursoragent@cursor.com>

policies.test.mjs

@@ -70,6 +70,11 @@ test('api lockdown blocks extension admin routes', () => {
   });
   assert.equal(agentRunGet.allowed, true);
 
+  const agentRunEvents = evaluateProxyRequest('GET', '/agent/runs/run-1/events', {
+    api_lockdown: true,
+  });
+  assert.equal(agentRunEvents.allowed, true);
+
   const deleteAllowed = evaluateProxyRequest('DELETE', '/sessions/abc', {
     api_lockdown: true,
   });