feat: surface task execution progress across Host Agent and Cloud

Host Agent now persists step-level execution detail locally (via a real
TaskMetadataStore/Timeline wired into TaskRunner) and reports a bounded
in-progress snapshot piggybacked on lease renewal. Cloud persists that
snapshot per active assignment and exposes it through the existing task
list/detail query path; Cloud Console renders it as a live badge. Host
Agent's local console gains authenticated, read-only task list and
detail/timeline pages (same-origin, server-rendered) with inlined
screenshots.

Also fixes a pre-existing gap in the shared Timeline: the actual
per-step LLM prompt is now recorded instead of the task goal, benefiting
both Runtime and Host Agent consoles. When a host uses the cloud planner
transport, each decide call's prompt and resulting tool decision are
durably logged in a new planner_decision_log table (with bounded
retention) and browsable from Cloud Console; direct-transport hosts
explicitly surface a "not reported" state.

Includes Alembic migrations 0008 (progress columns on scheduled_tasks)
and 0009 (planner_decision_log), bounded Host-Agent-local retention,
dual-backend repository parity, and Vitest + pytest coverage. Task 6.5
(manual end-to-end device verification) remains.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

packages/cloud-platform/cloud/db_models.py

@@ -106,6 +106,10 @@ class ScheduledTaskRow(Base):
     )
     lease_id: Mapped[str | None] = mapped_column(String, nullable=True)
     lease_expires_at: Mapped[str | None] = mapped_column(String, nullable=True)
+    progress_step_index: Mapped[int | None] = mapped_column(Integer, nullable=True)
+    progress_step_status: Mapped[str | None] = mapped_column(String, nullable=True)
+    progress_summary: Mapped[str | None] = mapped_column(String, nullable=True)
+    progress_updated_at: Mapped[str | None] = mapped_column(String, nullable=True)
     failure_reason: Mapped[str | None] = mapped_column(Text, nullable=True)
     result_json: Mapped[str | None] = mapped_column(Text, nullable=True)
     updated_at: Mapped[str | None] = mapped_column(String, nullable=True)
@@ -128,6 +132,31 @@ class TaskAttemptRow(Base):
     result_json: Mapped[str | None] = mapped_column(Text, nullable=True)
 
 
+class PlannerDecisionLogRow(Base):
+    __tablename__ = "planner_decision_log"
+    __table_args__ = (
+        Index(
+            "ix_planner_decision_log_task_attempt",
+            "task_id",
+            "attempt",
+            "step_index",
+            unique=True,
+        ),
+        Index("ix_planner_decision_log_host_created", "host_id", "created_at"),
+    )
+
+    id: Mapped[str] = mapped_column(String, primary_key=True)
+    host_id: Mapped[str] = mapped_column(String, nullable=False)
+    task_id: Mapped[str] = mapped_column(String, nullable=False)
+    attempt: Mapped[int] = mapped_column(Integer, nullable=False)
+    step_index: Mapped[int] = mapped_column(Integer, nullable=False)
+    system_prompt: Mapped[str] = mapped_column(Text, nullable=False)
+    user_prompt: Mapped[str] = mapped_column(Text, nullable=False)
+    tool_name: Mapped[str] = mapped_column(String, nullable=False)
+    arguments_json: Mapped[str] = mapped_column(Text, nullable=False)
+    created_at: Mapped[str] = mapped_column(String, nullable=False)
+
+
 class PluginRow(Base):
     __tablename__ = "plugins"
 
@@ -141,7 +170,9 @@ class PluginRow(Base):
 class UserRow(Base):
     __tablename__ = "cloud_users"
     __table_args__ = (
-        UniqueConstraint("username_normalized", name="uq_cloud_users_username_normalized"),
+        UniqueConstraint(
+            "username_normalized", name="uq_cloud_users_username_normalized"
+        ),
         Index("ix_cloud_users_enabled_role", "enabled", "role"),
     )
 
@@ -151,7 +182,9 @@ class UserRow(Base):
     display_name: Mapped[str] = mapped_column(String, nullable=False)
     password_hash: Mapped[str] = mapped_column(Text, nullable=False)
     role: Mapped[str] = mapped_column(String, nullable=False)
-    enabled: Mapped[int] = mapped_column(Integer, nullable=False, default=1, server_default=text("1"))
+    enabled: Mapped[int] = mapped_column(
+        Integer, nullable=False, default=1, server_default=text("1")
+    )
     must_change_password: Mapped[int] = mapped_column(
         Integer,
         nullable=False,