feat: 修复审计落差 #1/#2/#3/#6 + 管理面板移动端适配

#1 工具布尔标记生效(agent-106, 安全红线): loop toolSchemas/runToolCalls 加 allow-set 安全门 restrictSchemas/applyToolSecurityGate——群聊/陌生人只暴露允许工具(默认关), 被拒not_allowed软提示+AuditEvent, owner全工具不变; 身份靠 ActorEnv(非提示词)
#2 checkpoint 恢复(agent-109): run.go LoadLatest + resumableStopReason门控(只恢复in-flight工具循环,不出答案不续跑), 幂等不重放副作用, 新会话不误恢复; resume_test 4用例
#3 tool_result(agent-108, 协议层): Anthropic 原生tool_result块(tool_use_id/is_error)非user纯文本 + OpenAI tool消息补tool_call_id; Content加ToolCallID/IsError等; (loop接线层2处留待,见备注)
#6 capacity_awaken推送(agent-107): onCapacity从只Debug改推WS hub(BroadcastCapacityAwaken, sessionId定向+payload对齐前端AwakenPayload)
管理面板移动端(agent-110): AdminApp 汉堡菜单+抽屉侧栏+标题truncate防换行, RBAC守卫不受影响
全仓 build/vet/test绿 + 前端build绿; 前端无涉差异已对齐

备注: #3 loop接线层2处(assistant工具轮append历史 + Message.ToolCallID/IsError)留给后续; #4代审/#5子代理触发/#7拆文件后置(主人说后三不急)

internal/runtime/loop/options.go

@@ -9,7 +9,6 @@ import (
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/guardrail"
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/memory"
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/model"
-	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/persist"
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/tool"
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/trace"
 )
@@ -38,6 +37,12 @@ type Options struct {
 	// loop observes while deciding a round (design/14 §4), so a caller can
 	// surface the "能力点亮" progression to the frontend. Nil = no-op.
 	OnCapacity func(capacity.Event)
+	// OnAudit, when non-nil, receives an AuditEvent every time the loop denies a
+	// tool call in a restricted (group/stranger) environment (design/11 §3 §8),
+	// so the rejection lands in the audit trail and the frontend can render the
+	// small "xx 工具在群聊被拒" note. Nil = the rejection is still fed back to the
+	// model as a soft not_allowed result, just not recorded to an external sink.
+	OnAudit func(AuditEvent)
 	// Memory is the long-term memory store used to persist extracted items.
 	Memory *memory.Store
 	// Retriever injects relevant memories into the context, re-evaluated every
@@ -48,8 +53,11 @@ type Options struct {
 	WorkingMemory *memory.WorkingMemory
 	// Extractor derives memory items to persist after every step.
 	Extractor memory.Extractor
-	// Checkpoint persists a durable snapshot of the loop state at every step.
-	Checkpoint *persist.Store
+	// Checkpoint persists a durable snapshot of the loop state at every step and,
+	// on a later Run with the same sessionID, resumes an interrupted run from it
+	// (design §1 durable execution). *persist.Store satisfies the narrow
+	// checkpointStore interface; nil disables both persistence and resume.
+	Checkpoint checkpointStore
 	// Tracer emits a structured span for every step, LLM call and tool call.
 	Tracer *trace.Tracer
 	// Guards validates request/response payloads on the streaming path, where