feat(electron): add autonomous Electron runtime analysis (#464)

* feat: add autonomous Electron runtime analysis

* feat(electron): add lifecycle and boundary telemetry

* feat(electron): capture runtime boundary evidence

* fix(electron): package boundary hook helper

* feat(electron): report active capture coverage

* fix(electron): account for bring-your-own runtime

* feat(electron): expand agent-owned runtime scenarios

* fix(ghidra): keep fixture credentials out of argv

* perf(test): serialize local test and docs workloads

* fix(electron): harden active runtime capture

* fix(inspector): require exact runtime target authorization

* fix(docs): make managed manifest host independent

* fix(ci): make generated catalog portable

* fix: unblock autonomous command and electron flows

* fix(electron): close popup and detached helper gaps

src/browser/JavaScriptRuntimeScope.ts

@@ -58,3 +58,14 @@ export const authorizeRuntimeLocation = async (
     },
   };
 };
+
+/** Authorize a target whose Node Inspector URL omits its main entry path. */
+export const authorizeRuntimeTargetLocation = async (
+  value: string,
+  targetType: string,
+  roots: readonly string[],
+  origins: readonly string[],
+): Promise<RuntimeLocationDecision> =>
+  // A bare file:// URL contains no source identity. Do not attach to the
+  // first configured root merely because the target happens to be Node.
+  authorizeRuntimeLocation(value, roots, origins);