fix(pi): complete local web console entry and closure

[heggria]

Pi currently rejects /tf web even though Taskflow 1.0 already includes the local Control Console. This adds the direct slash-command entry, resolves the control binary from the installed public carrier, opens the default browser with a manual-URL fallback, and reuses/cleans up only its owned service. Login retains the existing private one-use token handoff, loopback transport and live authorization. The console displays Control Plane runs and auditable evidence; legacy Pi transcripts are outside this view.

The change also restores the public Pi SDK compatibility guide omitted when #181 was selectively integrated, and corrects release documentation that still described #142 as unmerged. The Pi package gains an exact workspace dependency on the existing public carrier; the release still contains ten packages.

Fixes #137. Completes the remaining documentation scope of #181.

Validation at 88c728c67d7afdaae96a74e95756ef673aead8fb:

• Typecheck passes; all 2,958 source tests pass locally (Node 24, concurrency 2), with no skips. Thirteen web source regressions also pass with the carrier dist temporarily absent, matching a clean CI checkout.
• Ten repeat-identical public packages pass 27 explicit imports, 87 wildcard exports and eight bins. Installed Pi passes 17 real-process checks and two SIGKILL recovery cases. The added installed /tf web check verifies actual carrier resolution/startup, routing/completions, browser fallback, login boundary, reuse and owned shutdown.
• Actual Chrome passes login, approval edit driving a real script, persisted Receipt, evidence explanation, project isolation and live revocation.
• All 13 CI jobs and the security scan pass at this head. The first Node 22 attempt had one 10-second readiness timeout in the unchanged Control CLI multi-project test; the same-head failed-job rerun passes. The failed attempt remains in the run history.
• Security scan: 87/100, 0 critical, 0 high, 1 medium, 7 low and 5 info. Cisco skill scanning completed; optional MCP deep scanning is unavailable and is not claimed.

Unix Control transport remains required. Same-UID trust is unchanged, #95 remains deferred, and existing unavailable live-provider/host coverage is not promoted to a pass. No tag, npm version, dist-tag or GitHub Release is created by this PR.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-08T06:40:01.135395Z	88c728c	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.