chore: align local-first control plane and editor fixes

- wire SQLite control-plane access/session paths into Rust web local-folder routes

- preserve local Markdown attachment semantics across upload, reload, and secondary-pane resource tabs

- refresh design governance docs, Reasonix task templates, and bug records

- retire root .mcp.json local MCP config

rust/crates/mnote-web/src/routes/local_folder_events.rs

@@ -2,7 +2,7 @@ use crate::app::AppState;
 use crate::context::RequestContext;
 use crate::error::WebError;
 use crate::routes::local_folder_source::{
-    decode_local_id_segment, ensure_local_workspace_read_access,
+    decode_local_id_segment, ensure_local_workspace_read_access_with_state,
     load_local_folder_file_tree_snapshot, load_local_folder_page_tree_snapshot,
     local_folder_watch_revision, local_workspace_id_from_root_uri,
 };
@@ -36,8 +36,9 @@ pub async fn local_folder_events(
     Extension(context): Extension<RequestContext>,
     Query(query): Query<LocalFolderEventsQuery>,
 ) -> Result<(HeaderMap, Sse<BoxedEventStream>), WebError> {
-    let canonical_root = ensure_local_workspace_read_access(&context, &query.root_uri)
-        .map_err(|error| error.with_context(&context))?;
+    let canonical_root =
+        ensure_local_workspace_read_access_with_state(&state, &context, &query.root_uri)
+            .map_err(|error| error.with_context(&context))?;
 
     let (mut headers, stream): (HeaderMap, BoxedEventStream) = if query.tree_live.unwrap_or(false) {
         build_tree_live_stream(state, context, canonical_root, query.root_uri).await?