feat(labs): opencode as embedded not cli owned

[benjaminshafii]

Summary

• move Labs runtime ownership into Electron main and boot local workspaces inside microsandbox
• run a single custom Labs server in the guest that owns OpenCode and exposes /health, /workspaces, /w/default/opencode/*, and /opencode/*
• add local repo selection, guest runtime scaffolding, and host auth/config carryover so local chat works through the sandboxed OpenWork proxy

Testing

• npm run typecheck
• npm run build
• direct microsandbox kernel smoke test:
  • local workspace booted in microsandbox from a repo path
  • session creation succeeded
  • prompt send succeeded
  • message fetch returned assistant output (Hello!)

Notes

• I did not run the full Docker dev stack + Chrome MCP flow for this branch.
• I verified the runtime path through direct microsandbox/kernel smoke tests instead.
• The branch targets task/openwork-labs-prd, which is the existing Labs branch line in this repo.

[github-actions]

The following comment was made by an LLM, it may be inaccurate: