Sense: add trusted social draft workflow

[oratis]

What

• add a model-visible social_compose tool for connector discovery, drafting, revision, and confirmation requests
• keep approval out of the model tool and require a loopback or authenticated user session
• add authenticated Sense social APIs with no public publish route
• render connected-media status, full immutable approval snapshots, approve, and cancel controls in Sense
• persist approval expiry and block social composition in autonomous runs

Why

This is the host enforcement layer for conversational social publishing. It makes the exact post snapshot reviewable while ensuring the model cannot approve or publish its own work.

Impact

Draft and approval state is stored under the user-scoped LISA home with mode 0600. No platform is contacted by this PR, and no social publish endpoint exists. This PR is stacked on #324.

Checks

• npm run typecheck
• npm test (1456 passed, 1 skipped)
• git diff --check