Desk Code Agent v0.2.0 — repository onboarding and visual comfort

[hanklin9188]

v0.2.0 UX

• real native local repository picker with honest empty-first onboarding
• larger typography, semantic light/dark/system themes, text scaling, density, reduced motion, focus and responsive layout
• explicit fixture-only guided demo and disabled selected-repository task runtime
• refreshed README, Traditional Chinese quick start, current screenshots and social-preview asset

Native repository safety

• no Git or other child process during acquisition
• bounded no-follow reads of repository-reported HEAD/ref text and a bounded file manifest
• HEAD metadata remains untrusted; Git object validity and worktree clean/dirty state are not claimed
• unsafe working-tree comparison removed; NOT_CHECKED_SAFETY_BOUNDARY is rendered honestly
• linked-worktree/submodule .git indirection fails closed in this release candidate
• harmless malicious-filter regression proves repository acquisition does not execute the canary
• absolute repository paths are not rendered

Windows release-candidate QA

• exact Linux/NTFS index-export identity: 24f2bd1f71ca66c2a3f9db01e166fc8fb368bf9dd7f9ee704cab04be5bca70ec (2,390 files; 89,503,124 bytes)
• unsigned MSI: 279f4a8dc6c97db5e1af540627d3892c6827f2b607d25ecd72adc6ccfc854f86
• unsigned NSIS: 732b2319f9a1dd4618c650d7dd1c1d88b60358edc6ccc840f65139603c132b4b
• privacy-remapped native binary; host/private path scan zero
• per-user MSI smoke lifecycle, v0.1→v0.2 NSIS upgrade, and clean-profile NSIS install/startup/inspection/uninstall/reinstall passed
• 205/205 distributed dependencies have authoritative license text; unresolved license blockers: 0
• npm/RustSec known-vulnerability count: 0; informational Rust warnings are disclosed in v4 QA

Limitations

• v0.2.0 remains a release candidate; this PR does not merge, tag, release, or upload binaries
• installers are unsigned
• selected-repository semantic indexing and task execution are not connected; Run remains disabled
• mutation remains disabled
• GitHub URL cloning is unavailable
• repository-reported HEAD text is not object validation
• WebView user profile may persist after uninstall

Validation

• exact clean index export: 50 test files, 255 passed, 1 explicit installed-runtime probe skipped; design/type/build PASS
• Windows native: fmt PASS, tests 5/5 PASS, clippy warnings denied PASS
• independent Spec/Product and Security/Engineering reviews: PASS with no unresolved High/Medium findings
• target-model calls: 0; benchmark calls: 0