feat(infra): port tool system ke TypeScript (37 tools + registry + executor)

Fase 3b rewrite Zesdex dari Rust ke TypeScript/Bun:
- Tool interface, ToolCtx + ToolCtxBuilder, InfrastructureToolExecutor
- Registry: allTools (37 tool), toolDefs, toolIsRisky, toolIsParallelSafe
- FS tools: read, write, edit, delete
- Search: grep, glob (glob matcher ringan)
- Shell: bash (timeout + timeout_spawn), bash_output, bash_kill
- Git: git_operator, git_worktree, git_cred + checkGitDestructive, checkCredentialRead
- Memory: remember, forget, recall via MarkdownMemoryRepository
- Utilitas: cd, dir_list, dir_cache_update, pong, todowrite, todofinish
- Best-practice: best_practice, commit_convention + BestPracticeEngine
- Web search (async fetch ke SearXNG), semantic_search/rebuild_index/list_symbols
- Workflow/spawn/parallel_delegate (delegasi ke engine 3c/3d dengan placeholder)
- Graduated checks + resolve_path sandbox (anti path-escape)
- 16 test tool system (registry, guards, resolve_path, fs roundtrip)

54 test hijau (38 lama + 16 baru), tsc strict bersih.

apps/packages/infrastructure/src/workflow/hive_mind.ts

@@ -0,0 +1,10 @@
+/**
+ * Hive-mind convergence engine — ported in sub-phase 3d.
+ */
+import type { JsonValue } from "@zesdex/domain";
+import type { ToolCtx } from "../tools/mod.ts";
+
+/** Execute a hive-mind convergence from tool arguments. */
+export async function executeHiveMind(_args: JsonValue, _ctx: ToolCtx): Promise<string> {
+  throw new Error("hive-mind engine not yet wired in this build");
+}

apps/packages/infrastructure/src/workflow/index.ts

@@ -0,0 +1,10 @@
+/**
+ * Workflow execution engine — ported in sub-phase 3d. This module provides
+ * the execution entry points used by the workflow tools.
+ */
+import type { ToolCtx } from "../tools/mod.ts";
+
+/** Execute a YAML workflow definition. */
+export async function executeWorkflow(_yaml: string, _ctx: ToolCtx): Promise<string> {
+  throw new Error("workflow engine not yet wired in this build");
+}