Plan shorter daemon restarts

[Aaronontheweb]

Summary

Record the approved plan for shorter daemon restarts. The plan covers durable approval waits, MCP startup, accepted input, and bounded session recovery.

This PR changes no production code. The active daemon stays untouched.

Evidence

• The September 17 trace shows two sessions that reached the 190-second drain limit.
• The same boot spent about 4.2 seconds on sequential MCP connections.
• Source inspection shows that the actor acknowledges buffered input without a journal record.

Delivery

The approval drain PR will target this branch. The MCP startup PR can target dev. Later recovery work depends on durable input admission and actor tests.

Verification

• git diff --check passed.
• The browser plan served through Tailscale contains the approved source text.

[Aaronontheweb]

Superseded by #2207. The new PR uses the same commit and belongs to native stack #2212.