feat(tree): checkpoint resource lifecycle work

提交当前顶层 mnote Git 工作区，范围集中在 04-tree-domain 的 resource/trash/filetree 生命周期、mnote-web resource_trash 路由、Convex/Next 兼容接口、sidebar/file-tree 客户端适配、smoke 脚本与对应设计/bug 记录。

不包含被 ignore 的 design/05-editor-mainline/reference-code/leptos-tiptap 嵌套仓库改动。新增 smoke 的测试密码改为运行时读取 MNOTE_E2E_PASSWORD，避免提交明文 credential assignment。

rust/crates/core-protocol/src/lib.rs

@@ -40,16 +40,16 @@ pub use kernel::{
     DocumentContentResult, DocumentReadEvidenceItem, DocumentReadEvidenceKind, DocumentReadNode,
     DocumentReadNodeMeta, DocumentReadNodeType, DocumentReadOutlineEntry, DocumentReadPageSubtree,
     DocumentReadStats, DocumentReadSubtree, KernelAttachEdge, KernelAuditStamp,
-    KernelBlockAssetRelation, KernelContentPayload, KernelCreateNode, KernelDetachEdge,
-    KernelEdge, KernelEdgeListResult, KernelEdgeType, KernelGetNode, KernelGetSubtree,
-    KernelGraphDirection, KernelGraphTraversalResult, KernelGraphVisit, KernelListChildren,
-    KernelListEdges, KernelMoveSubtree, KernelNode, KernelNodeMetadata, KernelNodeType,
-    KernelObjectIdentity, KernelObjectKind, KernelProjectionAssetKind,
-    KernelProjectionCapability, KernelProjectionFilter, KernelProjectionItem, KernelProjectionKind,
-    KernelProjectionRequest, KernelProjectionResourceKind, KernelProjectionResourceMeta,
-    KernelProjectionResult, KernelProjectionRowKind, KernelRefsPayload, KernelSubtreeRef,
-    KernelSubtreeResult, KernelTraverseGraph, KernelUpdateNode, WorkspaceSource,
-    WorkspaceSourceCapability, WorkspaceSourceKind,
+    KernelBlockAssetRelation, KernelContentPayload, KernelCreateNode, KernelDetachEdge, KernelEdge,
+    KernelEdgeListResult, KernelEdgeType, KernelGetNode, KernelGetSubtree, KernelGraphDirection,
+    KernelGraphTraversalResult, KernelGraphVisit, KernelListChildren, KernelListEdges,
+    KernelMoveSubtree, KernelNode, KernelNodeMetadata, KernelNodeType, KernelObjectIdentity,
+    KernelObjectKind, KernelProjectionAssetKind, KernelProjectionCapability,
+    KernelProjectionFilter, KernelProjectionItem, KernelProjectionKind, KernelProjectionRequest,
+    KernelProjectionResourceKind, KernelProjectionResourceMeta, KernelProjectionResult,
+    KernelProjectionRowKind, KernelRefsPayload, KernelSubtreeRef, KernelSubtreeResult,
+    KernelTraverseGraph, KernelUpdateNode, WorkspaceSource, WorkspaceSourceCapability,
+    WorkspaceSourceKind,
 };
 pub use mindmap::{
     MindmapAdapterProjection, MindmapAssociativeLine, MindmapCommand, MindmapKernelCapabilities,