fix(agent): make BitFun self-control work in CLI

[bobleer]

Summary

• move config-backed BitFunControl execution into one Product Assembly implementation shared by Desktop, CLI, and headless hosts
• return complete on-demand structured results, typed configure values, unambiguous capability/item routes, and tolerant ID aliases
• add bilingual deferred-tool search acceptance plus exhaustive typed-config read/write/readback gates
• keep generated Playbook, global-search, and Agent-control projections sourced from the same semantic catalog

Validation

• capability generation/check and 11 contract tests
• product-control domain tests (11 passed)
• focused BitFunControl core tests (12 passed)
• Desktop provider tests and cargo check
• Web global-search tests (22 passed) and Web type-check
• repository hygiene, core-boundary, and GitHub-config checks
• source-built CLI live E2E: search, get, configure false, read back, configure true, read back; exactly 6 BitFunControl calls, 0 failures; persisted setting restored to true

Scenario coverage

• exercised local CLI/headless configuration and local Desktop compilation/provider bindings
• remote-workspace path-scope contracts remain covered by focused tests; peer, remote-control, and detached-dispatch live environments were not exercised