feat: add host-aware PWA support

[comfuture]

Summary

• generate and register a production Workbox service worker at /sw.js
• serve a dynamic web app manifest whose installed name distinguishes each host as Codori @ <hostname-or-ip>
• add maskable 192 px and 512 px Codori icons and reuse the icon in the dashboard sidebar header
• require sw.js in the packaged server bundle and verify static service-worker delivery
• keep the screen awake with VueUse while any normal Codex turn is submitted or streaming
• preserve the existing realtime voice wake-lock implementation unchanged
• ship the PWA Nuxt module with the published client and coalesce pending wake-lock transitions

Why

Codori can run on several hosts, and users may install more than one of them on the same phone or desktop. A static PWA name would make those installations indistinguishable. The server-owned manifest derives a safe label from the current request hostname or IP while sharing one build artifact.

Long-running normal turns can also outlive a mobile screen timeout. The new app-level coordinator holds one best-effort screen wake lock across all active normal project and projectless-chat sessions, without changing realtime voice ownership.

Commit structure

• 1d16ec8 — host-aware PWA, packaged /sw.js, icons, and sidebar branding
• 4df7cbd — normal active-turn wake-lock lifecycle and tests
• 6c62b10 — published PWA dependency and pending wake-lock request coalescing

Validation

• pnpm install --frozen-lockfile
• pnpm --filter @codori/client lint
• pnpm --filter @codori/client typecheck
• pnpm --filter @codori/client test — 84 files, 559 tests passed
• pnpm --filter @codori/client build — generated sw.js, Workbox, and 357 precache entries
• pnpm --filter @codori/client pack --dry-run — published package includes the exported Nuxt configuration
• pnpm --filter @codori/server lint
• pnpm --filter @codori/server typecheck
• pnpm --filter @codori/server test — 20 files, 262 tests passed
• pnpm --filter @codori/server build
• live packaged-server smoke: /sw.js, hostname/IP manifests, and icons returned the expected content types and values
• in-app browser smoke: manifest link, theme color, and new sidebar icon rendered with no console warnings or errors

Known limits

• screen wake lock remains best effort and does not provide native background execution after a manual device lock or browser suspension
• PWA support covers the dashboard app, not the separate /xr/ bundle
• dynamic API, RPC, WebSocket, attachment, and workspace-file responses are not runtime-cached

Closes #149

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4df7cbdab9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[comfuture]

@codex review
Review head: 6c62b100187178a1b036abab2a0f5bb5df921bdc

Focus on published @codori/client PWA dependency availability and active-turn wake-lock request coalescing. Confirm the existing VueUse-managed visibility reacquisition remains intact.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. More of your lovely PRs please.

Reviewed commit: 6c62b10018

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".