chore: align local-first control plane and editor fixes

- wire SQLite control-plane access/session paths into Rust web local-folder routes

- preserve local Markdown attachment semantics across upload, reload, and secondary-pane resource tabs

- refresh design governance docs, Reasonix task templates, and bug records

- retire root .mcp.json local MCP config

rust/crates/mnote-web/src/routes/kernel.rs

@@ -2,7 +2,7 @@ use crate::app::AppState;
 use crate::context::RequestContext;
 use crate::error::WebError;
 use crate::routes::local_folder_source::{
-    ensure_local_workspace_read_access, load_local_folder_file_tree_snapshot,
+    ensure_local_workspace_read_access_with_state, load_local_folder_file_tree_snapshot,
     load_local_folder_page_tree_snapshot,
 };
 use crate::routes::query_support::resolve_effective_workspace_id;
@@ -85,7 +85,7 @@ async fn project_projection(
             .ok_or_else(|| {
                 WebError::bad_request_code("local_folder_root_required", "缺少本地文件夹 rootUri")
             })?;
-        ensure_local_workspace_read_access(&context, root_uri)
+        ensure_local_workspace_read_access_with_state(&state, &context, root_uri)
             .map_err(|error| error.with_context(&context))?;
         let snapshot = if projection == KernelProjectionKind::FileTree {
             load_local_folder_file_tree_snapshot(root_uri)?