Add first-party render-ui MCP tools and the MCP-Apps shell

[RhysSullivan]

Revives the generative-UI shell from #263 as a first-party capability (no plugin seam) with persistence.

• New @executor-js/mcp-apps-shell package: the sandboxed double-iframe shell (Sucrase JSX compile, shadcn/Recharts/Lucide scope, runtime Tailwind, TanStack-native tools proxy, trusted elicitation modal)
• render-ui / list-artifacts / show-artifact tools registered directly in the MCP host; execute-action(+-resume) gated on the client's MCP Apps capability via oninitialized re-sync
• render-ui is always advertised: MCP-Apps clients get the embedded app; other clients get a deep link to /artifacts/:id. Every successful render persists the artifact
• execute-action re-cloned from today's executeCode so it carries the Make paused-execution resume survive MCP session changes #1300 resume-fallback path
• Provided-globals validation is generated from the shell's real eval scope with a drift-pin test
• Shell browser suite, tool-server tests, and the sunpeak MCP-Apps e2e harness (capability patch no longer needed upstream; check script fails loud if it regresses)

Stack

1. Add artifact table and core artifacts API #1470
2. Add first-party render-ui MCP tools and the MCP-Apps shell #1471 👈 current
3. Add the Artifacts console pages #1472

[github-actions]

Cloudflare preview

Console	https://executor-preview-pr-1471.executor-e2e.workers.dev
MCP	https://executor-preview-pr-1471.executor-e2e.workers.dev/mcp
Deployed commit	be86f24

Sign-in is Cloudflare Access (one-time PIN to an allowed email). The preview has its own database and encryption key; it is destroyed when this PR closes.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1471

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1471

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1471

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1471

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1471

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1471

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1471

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1471

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1471

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1471

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1471

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1471

executor

npm i https://pkg.pr.new/executor@1471

commit: be86f24