feat: add private Activity day recaps

[nikshilov]

What changed

• adds one factual 3–6 item recap above the selected Activities day
• uses one explicit Activity-only model route without changing Ask or Daily Insights
• requires dedicated consent for cloud and signed-in CLI providers
• sends only bounded app, time, and sanitized topic fragments; no raw screenshots, audio, full URLs, file paths, or OCR dumps
• keeps one local provenance cache row per day and invalidates it with privacy deletion or retention
• makes Primary AI, Activity summaries, and Turn AI off durable and honest across persistence failures
• adds English and Russian UI copy plus product and privacy documentation

Verification

• focused affected suites: 160 tests, 0 failures
• full unhosted suite excluding one known machine-state assertion: 1335 tests, 19 skipped, 0 failures
• known excluded assertion is unrelated: installed Claude Code is 2.1.224 while Eye intentionally pins the qualified 2.1.220 binary
• Debug app build succeeded
• localization catalog JSON and git diff check passed
• installed Eye was not replaced or focused

Release blockers

This PR is intentionally draft. Do not merge or publish a new release until both gates pass:

1. qualify the exact Activity recap prompt physically in English and Russian
2. fix and rerun capture coexistence: on macOS 26.2 the current installed Eye added about 420 ms to the native screenshot shortcut even with Chronicle absent and Timeline healthy

The diagnostic is documented as non-qualification evidence; it does not claim the public 0.7.0 artifact passed the later gate.