feat(anolisa): add cosh, codex, claude-code adapter drivers

[kongche-jbw]

Description

Adds first-class ANOLISA adapter support for cosh (copilot-shell), Codex, and
Claude Code, implemented entirely as built-in Rust FrameworkDrivers — no
delegation to component-side install/uninstall shell scripts. Extends the
receipt security boundary with two new claim-resource kinds (Symlink,
FrameworkMarketplace), two controlled IO ops (write_file, create_symlink),
and the extension adapter type. Cosh uses a filesystem extension model with an
ownership marker so it never destroys user-installed extensions; Codex/Claude
Code drive their official marketplace CLIs and keep the receipt as
cleanup_failed when deregistration cannot complete.

Related Issue

no-issue: internal adapter roadmap (design in ANOLISA-design/docs/anolisa/cli)

Type of Change

• New feature (non-breaking change that adds functionality)

Scope

• tokenless (tokenless)
• anolisa (anolisa-cli)

Checklist

• I have read the Contributing Guide
• My code follows the project's code style
• I have added tests that prove my fix is effective or that my feature works
• For anolisa: cargo clippy --all-targets --locked -- -D warnings,
  cargo fmt --all --check, and cargo test --locked pass

Testing

• cargo test --workspace --locked — all 11 test binaries pass
• cargo clippy --workspace --all-targets --locked -- -D warnings — clean
• cargo fmt --all -- --check — clean
• cargo doc --workspace --no-deps — clean
• New unit tests per driver + tests/adapter_frameworks.rs integration suite
  (fake codex/claude CLIs asserting exact argv; cosh copy/remove-only-own-dir;
  dry-run writes nothing; forged symlink target / resource_root rejected;
  CLI-removal-failure and ownership-marker-missing keep the receipt)