Limonata resident-stage transport library

Module: limonata/residentclient. Run(ctx, Config, Options) retains one native
stage process across authenticated WebSocket reconnects, bounds frames/queued
work, validates allowed operations and clears old KV sessions before reconnect.
The sole WebSocket reader continues processing heartbeats during native calls.
HTTP401/403 and remote policy1008 stop the contribution. Context cancellation
reaps the owned native process; native calls have a bounded deadline.

Production Linux/Windows adapters provide Options.Factory and enforce their OS
sandbox, device selection, executable integrity and release-pinned artifact
policy. StartNative/StartNativeIn are shell-free supervised process helpers;
they are not an OS sandbox by themselves. The default launcher is for the
standalone operator pilot. Never derive its executable/arguments/environment
from a remote request or expose private configuration as a subprocess argument.

Config.ModelSHA256 with Start/End/Width/Final enables exact native stage metadata
matching. Config.ModelHash/ModelBytes verify the complete file before loading.
Production callers also require GPU placement and the actual startup probe.
profiles.go pins the production32Bmodel, its two stage artifacts and assignment
parameters. Assignment validation rejects arbitrary URLs, models or runtime
parameters. Transport supports WSS and loopback-only WS test fixtures.

Status events describe local lifecycle/request activity. They are not accepted
work receipts, proof of inference or monetary rewards. Error strings omit raw
native diagnostics and credentials. No prompts, activations or response text
are persisted by this library.

Run go test -race ./... and go vet ./... here. The moved standalone tests cover
real WebSocket heartbeat/reconnect cleanup, queue limits, cancellation/process
reaping, metadata pins and authorization rejection. Real CPU model execution is
covered separately by the repository's isolated integration fixtures. Physical
GPU and Internet performance require hardware validation.
