宜博 / lemongraph

Ports graphloop's test_isolated_coding_workspace.py/test_workspace_security.py/
test_change_manifest.py/test_selective_apply.py into supervisor/isolation/
(only the import path changed -- the graphlemon modules were already adapted
verbatim from graphloop, confirmed API-identical) plus a few extra edge
cases the originals didn't cover. 52 tests green, replacing what had been a
single manual smoke test since these modules were staged.

Adds supervisor/deploy_supervisor.py: process lifecycle only (PID file,
atomic status file, start/stop/is_running), no deploy decision logic yet --
that's U-037+'s job, injected via the poll_fn hook run_foreground() calls on
a schedule. PID/status conventions adapted (not imported) from graphloop's
hermes_watchdog.py atomic-write pattern. Fail-closed: any exit path
(normal, SIGTERM, or an exception from poll_fn) unconditionally writes
status='stopped' and removes the PID file, so is_running() never lies.
RealSubprocessLifecycleTest actually spawns and stops a real
`python3 -m supervisor.deploy_supervisor` process rather than mocking it,
per this Unit's own "能独立启停" Done criterion.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Establishes the first commit for graphlemon before U-001 work begins:
architecture/SDD docs (including the PH5 self-hosting design already
folded into 01-M/03-C/04-P/mvcp-contract v1.7.0), the A-1 spike results,
the graphloop-adapted supervisor/isolation utilities, PH3 wireframe
prototypes (now cross-referenced from 02-V), and this session's
development-plan review (U-024 dependency split, U-035 regression
requirement, new U-004.5 e2e-harness unit, src/ directory convention).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>