Migrate to Electrobun 2.0.2 (Hutch)

Electrobun 2.x replaces the vendored CLI with Hutch: the npm package is now a
bootstrap whose exports are a throwing stub, and the SDK is projected into
.hutch/devkit. The app stays on the Bun main process — `mainProcess: "bun"` is
load-bearing, since the 2.x default (Cottontail) ignores build.bun and with it
the ssh2 externals — and the bundle now ships the pinned Bun 1.4.0.

- electrobun 2.0.2 as an exact devDependency. `electrobun prepare` takes the
  old CLI re-sign step's slot in postinstall and every dev/build/start/release
  script: tsc (root tsconfig extends the devkit's) and the Angular build
  (electrobun/view mapped into the devkit) resolve the SDK there.
- Imports move to electrobun/main. The CLI re-sign script and the v1 "three"
  type shim are gone (Hutch's binaries are validly signed).
- UI: Electroview's bunSocket is hostSocket; noImplicitReturns is off because
  the devkit's raw-TS browser SDK compiles inside the UI program.
- Updater.applyUpdate() now consults before-quit, so the transfers/unsaved
  guard's "Quit Anyway" re-runs the apply instead of quitting without it.
- 2.x applies trafficLightOffset from macOS's default button position (1.18.1
  clamped it inside the titlebar); {12, 4} centres the lights in the header.
- Releases: mac-x64 dropped (2.x publishes no macOS x64 core, so no Rosetta
  path). artifacts/ is emptied before each build and published verbatim.
  Installers lost the stable- prefix (the update feed kept it), so release.ts,
  deploy.sh and the site links follow. Linux ships Electrobun's Setup
  installer instead of the portable tarball and its miniSCP.sh wrapper.
- Docs cover all of the above, plus re-checks against 2.0.2: still no native
  modal windows; window close is now cancellable through will-close.

Verified: tsc, build:ui, a stable mac-arm64 release (dmg + the v1-compatible
stable-macos-arm64 feed) and dev launches (RPC, Settings window, traffic
lights). Windows/Linux builds and the v1 -> 2.x Windows update bridge still
need their first run on native machines.

Co-Authored-By: Claude <noreply@anthropic.com>

.gitea/workflows/release.yml

@@ -1,14 +1,16 @@
 # Release matrix — INERT until act_runner instances with these labels are
 # registered on git.teknes.es. Each OS builds its own artifacts (electrobun
 # cannot cross-compile: packaging needs codesign/hdiutil on macOS and
-# rcedit/PowerShell on Windows).
+# rcedit/PowerShell on Windows). No mac-x64: Electrobun 2.x has no macOS x64
+# core.
 #
 # Runner prerequisites:
-#   macos   — arm64 Mac: bun, Xcode CLT, Rosetta 2 (softwareupdate
-#             --install-rosetta), network to github.com (electrobun downloads
-#             its per-arch core binaries on first build)
-#   windows — Windows 11 x64: bun, network to github.com; WebView2 runtime is
-#             preinstalled on Win 11
+#   macos   — Apple Silicon Mac: bun, Xcode CLT, network to github.com and the
+#             Electrobun/Hutch release hosts (`bun install` runs `electrobun
+#             prepare`; the first build per Electrobun version fills ~/.hutch
+#             with Hutch, the core, Cottontail and the pinned Bun, ~200 MB)
+#   windows — Windows 11 x64: bun, the same network access; WebView2 runtime
+#             is preinstalled on Win 11
 #
 # Trigger: push a tag like build-62 (git tag build-$(git rev-list --count HEAD)).
 name: release
@@ -26,7 +28,6 @@ jobs:
           fetch-depth: 0 # full history — the build number is the commit count
       - run: bun install --frozen-lockfile
       - run: bun scripts/release.ts --target mac-arm64
-      - run: bun scripts/release.ts --target mac-x64
       - uses: actions/upload-artifact@v3
         with:
           name: mac