feat: surface task execution progress across Host Agent and Cloud

Host Agent now persists step-level execution detail locally (via a real
TaskMetadataStore/Timeline wired into TaskRunner) and reports a bounded
in-progress snapshot piggybacked on lease renewal. Cloud persists that
snapshot per active assignment and exposes it through the existing task
list/detail query path; Cloud Console renders it as a live badge. Host
Agent's local console gains authenticated, read-only task list and
detail/timeline pages (same-origin, server-rendered) with inlined
screenshots.

Also fixes a pre-existing gap in the shared Timeline: the actual
per-step LLM prompt is now recorded instead of the task goal, benefiting
both Runtime and Host Agent consoles. When a host uses the cloud planner
transport, each decide call's prompt and resulting tool decision are
durably logged in a new planner_decision_log table (with bounded
retention) and browsable from Cloud Console; direct-transport hosts
explicitly surface a "not reported" state.

Includes Alembic migrations 0008 (progress columns on scheduled_tasks)
and 0009 (planner_decision_log), bounded Host-Agent-local retention,
dual-backend repository parity, and Vitest + pytest coverage. Task 6.5
(manual end-to-end device verification) remains.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

packages/cloud-platform/cloud/scheduler.py

@@ -53,6 +53,10 @@ class ScheduledTask:
     failure_reason: str | None = None
     updated_at: datetime | None = None
     created_at: datetime = field(default_factory=utc_now)
+    progress_step_index: int | None = None
+    progress_step_status: str | None = None
+    progress_summary: str | None = None
+    progress_updated_at: datetime | None = None
 
 
 @runtime_checkable
@@ -199,7 +203,10 @@ class TaskScheduler:
 def _matches(device: "PooledDevice", constraints: TaskConstraints) -> bool:
     if constraints.target_host_id and device.host_id != constraints.target_host_id:
         return False
-    if constraints.target_device_id and device.device_id != constraints.target_device_id:
+    if (
+        constraints.target_device_id
+        and device.device_id != constraints.target_device_id
+    ):
         return False
     if constraints.driver_type and device.driver_type != constraints.driver_type:
         return False