feat(ui): first-run setup screen and server connect form

[rigel-mintaka]

Summary

This implements T-4 of docs/designs/ui/compass-native-server-url-entry/design.md: the first-run setup screen and the server connect form. It codes against the Go method names and JSON shapes the record fixes. The Go side lands in T-2b and T-3, so the screen is unreachable until T-3 sets the setup mode.

• shell-globals.ts: ShellMode gains setup and reopen.
• daemon-transport.ts, still the only @wailsio/runtime importer:
  • shellConnect sends {token} or {token, server};
  • ConnectResult gains invalid-url, invalid-ca and an optional serverUrl; today's Go result omits it until T-2b;
  • new pickCACert, chooseEmbedded, shellState, onSetupDecided and quitApp;
  • a malformed response frame becomes an RPC error and unsubscribes, so the pending fetch rejects. A head status must be 200–599; null-body statuses (204, 205, 304) get no body stream.
• New boot-setup.ts:
  • two choices: run on this computer, or connect to a server;
  • it subscribes to setup:decided, then reads shellState; it hands off to the configured client or shows the neutral reopen screen;
  • the listener survives this window's failed or refused attempts;
  • a sibling decision aborts an idle connect form. A connect call in flight finishes first, and its own ok wins;
  • a rejected shell call (chooseEmbedded, shellConnect, shellState, pickCACert) leaves a retryable screen. A decision that arrives during a failed or stale state read is kept and retried;
  • a sibling client decision sets the live server URL before the configured hand-off.
• boot-native.ts setup entry: editable URL, CA picker with "Use system trust" (a cancelled dialog keeps the pick), and no auto-probe. Server messages render via textContent. A setup ok must carry serverUrl, and the provider is built from it; the form is cleared on success. The configured entry is unchanged.
• boot-mode.ts routes setup to bootSetup and reopen to the neutral screen.

Verification

• Targeted bun test (boot-native, boot-setup, boot-mode, shell-globals, daemon-transport, daemon-transport.wails): 87 pass, each test written red first. Each T-4 test-cycle bullet maps to a case, including:
  • abort while idle;
  • abort mid-call with a non-ok result;
  • abort mid-call with an ok result;
  • rejection then retry for each shell call;
  • a decision during a failed state read.
• moon run compass-ui:typecheck: pass. biome check on the changed files: clean.
• compass-ui:test (full): pass in CI.
• Review: three rounds plus a confirmation pass. All high and medium findings are fixed; one low remains (cover 205 and 304 as well as 204).

Risks

Medium. These are new async UI state transitions, but no current launch path reaches them, so existing users see no change. Rollback: revert.

Compatibility

shellConnect callers that send only a token are unchanged. The new bound methods need the Go side from T-2b and T-3.

Documentation

None here. User-facing docs land in T-5.

Refs RIG-4564

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

[linear-code]

RIG-4564

[github-actions]

Compass engineering docs preview: https://compass-native-rig-4564-setu.compass-eng-docs.pages.dev

Deployed from compass-native/rig-4564-setup-screen at c7247c1.