feat(tui): prepare Use before the first model turn

[ZhiXiao-Lin]

Summary

• prepare the verified A3S Use component before TUI terminal takeover and the first model turn
• preserve strict zero-network and zero-receipt behavior for offline mode and A3S_NO_AUTO_INSTALL=1
• keep registry discovery on its one-second budget while giving initial MCP projection a separate five-second budget
• advertise ready browser, native Office, built-in OCR, and verified extension routes only through the restricted use worker
• hide raw mcp__use_* tools from the primary model and inherit parent confirmation for bounded provider mutations
• add use/ocr to the typed component catalog and document the first-use lifecycle
• add fake-release, release-shaped, offline, component-contract, and projection regression coverage

Validation

All validation used the published A3S crate versions selected by
.github/scripts/use-published-a3s-crates.sh.

• cargo fmt --all -- --check
• cargo clippy --locked --all-targets -- -D warnings
• cargo test --locked --all-targets
• cargo test --locked --test code_use_first_use -- --test-threads=1
• cargo test --locked --lib use_registry::tests -- --test-threads=1
• cargo test --locked --bin a3s code_use_resolution -- --test-threads=1
• cargo test --locked --test component_commands -- --test-threads=1
• cargo test --locked --test tui_exit -- --nocapture
• CARGO_PROFILE_RELEASE_LTO=false cargo build --locked --release

The real-release E2E remains explicitly ignored unless
A3S_USE_E2E_BIN and A3S_USE_E2E_SOURCE_ROOT point to independently built
Use release assets.

Recovery scope

This is a focused extraction of a preserved interrupted development session.
It intentionally excludes the independent /use command, Plan module,
DeepResearch, transcript/export, history, permissions, relay, task, and
workspace recovery work so those can be reviewed separately.

[ZhiXiao-Lin]

Integrated through #40 at merge commit c252583e413f70a4cb265012d776f9d050b94de5. The consolidated v0.9.7 branch contains this PR's latest head 0d05bb77a4e43cba28e7751d1e68abdbb5e396fe and passed Linux, macOS, and Windows CI.