DSH: govern release, upgrade and complete-availability claim

## 目标

将 DSH 设计转为可持续维护的发布、升级、兼容和证据制度；只有 Cindy bridge 全层验证后才可称完整可用。

## 交付

- platform runner、F0 packet refresh、ACP/Cindy bridge capability diff、release fixtures、upgrade/rollback ledger、bounded diagnostics/support runbook。
- local/remote/Mobile/agent regression 与 independent P0/P1 review。

## 验收

- 每项 promoted runtime capability 有独立证据；未验证项保持 gated。
- upgrade 保留 binding/Home/profile/plugin state 或可逆阻塞；不以 reinstallation 掩盖不兼容。

Blocked by #3781.

Canonical plan: `docs/issues/dsh-native-integration/`.

Start with the canonical plan in docs/issues/dsh-native-integration/ and review blocked issue #3781 first. Map the requested platform runner, bridge capability diff, release fixtures, upgrade/rollback ledger, diagnostics runbook, and regression reviews to that plan. Done means each promoted capability has independent evidence and upgrades preserve state or fail reversibly.

Written by the indexing model from the issue text.