feat(web): W4-A wire console to real endpoints

- Agent page uses contracts (AgentRun/AgentRunDetail/AgentGoalReport) instead of a local
  mirror; ?mock=1 stays as an explicit demo switch; run snapshot refreshes on agent.run_status;
  stream auto-follow only while the user stays near the bottom (abort stays reachable)
- settings: Pi provider select incl. fake, new Agent runtime card (budgets, fakeScript)
- download trace uses /tasks?subjectId= and /organization-records?downloadTaskId= instead of
  time-window engine run matching and path matching; new business-task tab with cancel/retry
- workbench download dialog posts /acquisition-plans and shows per-slot rejection reasons
- preference tag revision history; subscription search by title/kind; identity/alias/subscription
  lists show entity titles; slot cards show current asset summary; policy preview sample titles
- DecisionSummary / IdentityRevisionList / ReleaseIdentityResult / TaskAccepted / PolicyPreviewSummary /
  OrganizePlanArtifactContent taken from contracts
- docs: SSE for console (cookie) vs GET /events?after=&limit= JSON replay for API keys

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/api/subscriptions.ts

@@ -4,6 +4,7 @@ import {
   MediaEntity,
   Subscription,
   type SubscriptionCreate,
+  type SubscriptionMediaKind,
   type SubscriptionStatus,
   type SubscriptionUpdate,
 } from "@umt/contracts";
@@ -17,7 +18,13 @@ export const subscriptionKeys = {
   list: (f: SubscriptionFilters) => ["subscriptions", "list", f] as const,
 };
 
-export type SubscriptionFilters = { status?: SubscriptionStatus; mediaEntityId?: string };
+export type SubscriptionFilters = {
+  status?: SubscriptionStatus;
+  mediaEntityId?: string;
+  mediaKind?: SubscriptionMediaKind;
+  /** 标题 / 原名 / 别名 / 未建档检索词 */
+  q?: string;
+};
 
 const Page = cursorPage(Subscription);