chore: adopt Nova app and managed MCP connection

[bigduu]

Summary

Adopt Nova's independently launched macOS app and managed MCP entrypoint in Zenith. The new nova mcp plugin entry connects macOS clients to the separately installed Nova.app before desktop initialization, while Windows/Linux keep stdio. This establishes the process boundary needed to keep Nova desktop permissions independent of Bodhi/plugin upgrades.

Refs bigduu/Nova#33, bigduu/Nova#39 and #185. The UX tracker remains open for permission/status UI, browser interaction fixes, signed distribution and real TCC upgrade acceptance.

Testing

• Nova chore: sync Bodhi lockfile pointer #39 passed independent review at exact head 7f18e07a01cbed78b32b4f0c008c53bb49eb1557 and all six CI jobs: https://github.com/bigduu/Nova/actions/runs/33946225704.
• The pinned SHA is the verified squash merge commit on Nova master, with the same source tree as the reviewed PR.
• Root diff contains exactly one mode-160000 gitlink update; git diff --check passes. Submodule Guard must pass before merge.
• No release, installed-app replacement or real TCC grant/upgrade test is claimed by this pointer update.

Submodule Updates

• nova: 1371aedf39b201345773beef8b537fc7329a3a58 → 8f029d22dbc9ab317a68560788d1e6360b71120e.
  • Includes Nova.app / app-owned transport and Chrome foundation from Nova chore: bump bamboo pointer for #251 #31, app/extension icons from chore: bump bamboo pointer for #244 #32, and the reviewed managed MCP default entrypoint from chore: sync Bodhi lockfile pointer #39.
  • Pins Nova master's actual squash merge commit, not the feature branch head. No other submodule pointer, .gitmodules, or release version changes.

[bigduu]

Independent agent review completed at exact root head c1ac538c547425c79c77a2b7bc71c0849a2f7366 against live main 1f47ae72c1eee8678b9c9990a67e6532d752f192. No blocking finding.

The complete diff is one mode-160000 nova gitlink: 1371aedf39b201345773beef8b537fc7329a3a58 → 8f029d22dbc9ab317a68560788d1e6360b71120e. The old pin is an ancestor; the new pin is Nova master's actual merged #39 commit. Its tree 583d552c262c05d74ca1d6ec74f3e05e8a074b50 exactly matches the independently reviewed and CI-passing feature head.

The adopted scope includes Nova #31 (app/OCR/Chrome foundation), #32 (icons), and #39 (managed entrypoint). No other pointer, ordinary file, release version, or .gitmodules change exists. The PR body documents all three and includes the required Submodule Updates section and both full SHAs.

No duplicate builds are needed for this pointer-only diff; Submodule Guard and final live head/base/review checks remain merge gates. Signed distribution and live permission-upgrade acceptance remain explicitly outside this pointer PR.