Migrate to Electrobun 2.0.2 (Hutch)

Electrobun 2.x replaces the vendored CLI with Hutch: the npm package is now a
bootstrap whose exports are a throwing stub, and the SDK is projected into
.hutch/devkit. The app stays on the Bun main process — `mainProcess: "bun"` is
load-bearing, since the 2.x default (Cottontail) ignores build.bun and with it
the ssh2 externals — and the bundle now ships the pinned Bun 1.4.0.

- electrobun 2.0.2 as an exact devDependency. `electrobun prepare` takes the
  old CLI re-sign step's slot in postinstall and every dev/build/start/release
  script: tsc (root tsconfig extends the devkit's) and the Angular build
  (electrobun/view mapped into the devkit) resolve the SDK there.
- Imports move to electrobun/main. The CLI re-sign script and the v1 "three"
  type shim are gone (Hutch's binaries are validly signed).
- UI: Electroview's bunSocket is hostSocket; noImplicitReturns is off because
  the devkit's raw-TS browser SDK compiles inside the UI program.
- Updater.applyUpdate() now consults before-quit, so the transfers/unsaved
  guard's "Quit Anyway" re-runs the apply instead of quitting without it.
- 2.x applies trafficLightOffset from macOS's default button position (1.18.1
  clamped it inside the titlebar); {12, 4} centres the lights in the header.
- Releases: mac-x64 dropped (2.x publishes no macOS x64 core, so no Rosetta
  path). artifacts/ is emptied before each build and published verbatim.
  Installers lost the stable- prefix (the update feed kept it), so release.ts,
  deploy.sh and the site links follow. Linux ships Electrobun's Setup
  installer instead of the portable tarball and its miniSCP.sh wrapper.
- Docs cover all of the above, plus re-checks against 2.0.2: still no native
  modal windows; window close is now cancellable through will-close.

Verified: tsc, build:ui, a stable mac-arm64 release (dmg + the v1-compatible
stable-macos-arm64 feed) and dev launches (RPC, Settings window, traffic
lights). Windows/Linux builds and the v1 -> 2.x Windows update bridge still
need their first run on native machines.

Co-Authored-By: Claude <noreply@anthropic.com>

site/deploy.sh

@@ -3,7 +3,7 @@ set -euo pipefail
 # Publish this machine's built artifacts into the served flat download folder.
 #
 # Run from the repo root AFTER building for this host's target, e.g.:
-#   bun scripts/release.ts            # or --target mac-x64 / win-x64
+#   bun scripts/release.ts            # or --target win-x64 / linux-x64
 #   site/deploy.sh
 #
 # electrobun cannot cross-compile, so each OS/arch is built (and deployed) on its
@@ -19,12 +19,15 @@ set -euo pipefail
 dl="${MINISCP_DL_DIR:-/srv/miniscp/dl}"
 mkdir -p "$dl"
 
-# electrobun's flat artifacts (stable-<os>-<arch>-*): installers, update payloads,
-# update.json, and (once release.baseUrl is set) .patch files.
-if compgen -G 'artifacts/stable-*' >/dev/null; then
-	cp -f artifacts/stable-* "$dl"/
+# electrobun's flat artifacts, verbatim — the updater contract, never rename them:
+# the update feed (stable-<os>-<arch>-update.json, .tar.zst, .patch) plus the
+# installers, which 2.x names without the channel prefix (macos-arm64-miniSCP.dmg,
+# win-x64-miniSCP-Setup.zip). release.ts empties artifacts/ first, so it holds
+# exactly this build.
+if compgen -G 'artifacts/*' >/dev/null; then
+	cp -f artifacts/* "$dl"/
 else
-	echo "deploy: WARN — no artifacts/stable-* found (did scripts/release.ts run?)" >&2
+	echo "deploy: WARN — artifacts/ is empty (did scripts/release.ts run?)" >&2
 fi
 
 # Windows portable zip is a release.ts extra (build-numbered) → give it a stable name.