feat: advance local-first workspace checklist

- add admin access-policy UI and local access control surfaces

- add local markdown conflict resolution UI and smoke coverage

- add ACP local agent changed-files audit scaffold and read-only write guard

- document current P0-P2 checklist progress and verification evidence

rust/crates/mnote-web/src/acp_runtime.rs

@@ -116,7 +116,7 @@ impl AcpRuntimeManager {
     /// Create a new runtime manager with built-in default configurations.
     ///
     /// Reads environment variables to configure Hermes and Reasonix runtimes.
-    /// Default active runtime is set by `MNOTE_WEB_ACP_DEFAULT_RUNTIME` (default: "hermes").
+    /// Default active runtime is set by `MNOTE_WEB_ACP_DEFAULT_RUNTIME` (default: "reasonix").
     pub fn from_env() -> Self {
         let mut runtimes: HashMap<String, AcpRuntimeConfig> = HashMap::new();
 
@@ -153,7 +153,8 @@ impl AcpRuntimeManager {
             );
         }
 
-        let default = env::var("MNOTE_WEB_ACP_DEFAULT_RUNTIME").unwrap_or_else(|_| "hermes".into());
+        let default =
+            env::var("MNOTE_WEB_ACP_DEFAULT_RUNTIME").unwrap_or_else(|_| "reasonix".into());
 
         Self {
             runtimes,