收口 Rust Web 入口与 AI 写入链

- 将 3000 主入口继续收口到 mnote-web，补齐 /favicon.ico、/api/auth、session alias、AI run 等 Rust Web 路由边界。

- 更新登录页与 Convex Auth 代理，支持测试账号快速登录写入真实 Convex Auth cookie。

- 推进页面设置、Wolai 对齐、Phase 7 AI kernel/CLI-first 设计文档与相关 smoke 脚本。

- 更新 leptos-tiptap 生成资产、mnote-cli/bridge-runtime、前端依赖和 dev/prod 启动脚本。

rust/crates/mnote-web/src/routes/documents.rs

@@ -65,6 +65,12 @@ pub struct DocumentOptionsRequest {
     pub command_name: Option<String>,
 }
 
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct DocumentPurgeRequest {
+    pub document_id: String,
+}
+
 const NEXT_DOCUMENTS_BASE_URL_ENV: &str = "MNOTE_NEXT_BASE_URL";
 const HEADER_MNOTE_WEB_OWNER: &str = "x-mnote-web-owner";
 const HEADER_DOCUMENTS_TRANSPORT: &str = "x-mnote-documents-transport";
@@ -552,6 +558,50 @@ pub async fn save(
     Ok(ok_response(&context, result))
 }
 
+pub async fn purge(
+    State(state): State<AppState>,
+    Extension(context): Extension<RequestContext>,
+    Json(body): Json<DocumentPurgeRequest>,
+) -> Result<(StatusCode, HeaderMap, Json<Value>), WebError> {
+    let document_id = body.document_id.trim();
+    if document_id.is_empty() {
+        return Err(
+            WebError::bad_request_code("document_id_required", "缺少有效 documentId")
+                .with_context(&context),
+        );
+    }
+    let command = RuntimeCommandEnvelopeWire {
+        name: "documents.purge".into(),
+        command_id: format!("document_purge_{}", context.trace.request_id),
+        idempotency_key: context.source.idempotency_key.clone(),
+        actor: RuntimeActorWire {
+            actor_type: context.auth.actor_type.clone(),
+            actor_id: context.auth.actor_id.clone(),
+            session_id: context.auth.session_id.clone(),
+        },
+        source: RuntimeSourceWire {
+            channel: context.source.channel.clone(),
+            client: context.source.client.clone(),
+        },
+        target: Some(RuntimeTargetWire {
+            workspace_id: None,
+            page_id: Some(document_id.to_string()),
+            block_id: None,
+        }),
+        payload: json!({
+            "documentId": document_id,
+        }),
+        preflight_data: None,
+        reason: Some("mnote-web documents purge compat".into()),
+        refs: vec!["mnote-web-documents-compat".into()],
+        dry_run: false,
+        validate_only: false,
+    };
+    let result =
+        execute_runtime_command_via_convex(state.config(), &context, None, command).await?;
+    Ok(ok_response(&context, result))
+}
+
 pub async fn title(
     State(state): State<AppState>,
     Extension(context): Extension<RequestContext>,