Align AQE embedding setup, host configuration, and verification

[pacphi]

AQE could be installed and registered while no semantic embedding backend was usable. This adds persisted backend selection, explicit local MiniLM provisioning, and owned environment updates for Claude, Codex, and OpenCode. Setup stops with actionable guidance when the selected backend is unavailable; existing choices and explicit opt-outs survive subsequent setup and sync.

Verification now uses the installed AQE runtime in isolation, compares stored SQLite provenance against its actual initialized identity, and distinguishes RVF contention from initialization/storage failures. Local-only transformer probes use the same ESM conditional export as AQE, preventing a second module instance from bypassing the no-download setting. Existing vectors are never relabelled or migrated.

The changes are split into intent, runtime verification, host projections, provisioning/lifecycle, documentation/clean-install CI, probe safety, and hosted-evidence commits. ADR-0055 and the user guide document the new-user default and alternatives. Native Ollama must be installed and running before selecting the local default; setup discloses the approximately 45 MB model download. OpenCode updates its owned AQE entry immediately without changing plugins or permissions.

Validation:

• Local full suite before the final safety regression: 4,294 passed, six skipped; legacy suites passed. Coverage: 92.19% lines, 81.54% branches, 91.61% functions.
• Final probe/projection regressions: 30 passed; probe suite also passed on Node 22, 24, and 26.
• Typecheck, lint, complexity, Markdown, and build checks passed; existing lint warnings remain.
• Installed AQE 3.14.2 produced valid 384-dimensional semantic embeddings. The existing corpus still has one different space identity and 135 unverified vectors; no migration was attempted.
• The packed clean-Mac nightly now starts native Ollama with disposable model storage and checks the real backend. Hosted run https://github.com/pacphi/agentic-kit/actions/runs/35526137263 passed the packed clean-macOS setup, live Linux/macOS checks and external links on source 2b13ade.

Ollama does not expose atomic create-if-absent for aliases. The installer rechecks inventory after download and preserves observed existing aliases, but cannot eliminate a concurrent alias-creation race.