fix(ci): restore cross-platform Ultracode coverage - #212

Summary

Follow-up to #211 that fixes the deterministic Desktop and Windows failures exposed by the post-merge CI run.

Changes

• authorize trusted MetaHub topology requests and cover active/stale principal routing
• make MCP transport reconnect generation-aware after an explicit closed-transport failure
• resolve Bazel rlocationpath values through runfiles directories and escaped manifests
• preserve fail-closed Windows resource and workflow-journal handling under replace/open races
• inject runtime resource stores and secret audit sinks so cross-platform tests avoid machine-global state
• keep the dedicated Windows process-group test out of the aggregate backend suite

Validation

• bazel build //... --config=clippy
• bazel build //... --config=rustfmt
• 22 affected unit, integration, lifecycle, and MetaHub/Desktop serve Bazel targets
• //apps/desktop:e2e_host and //apps/desktop:e2e_llm_backend federation suites
• MCP rich-content real provider E2E
• git diff --check

Generated with Codex