Add iOS pane action workflows - #429

Outcome

Refs #218 and #200.

Adds the native iOS pane action menu wiring for remote merge / create-PR / rename / close flows, plus distinct native stop and cleanup confirmations, so mobile pane actions now surface guarded lifecycle choices through production UI instead of dead-end placeholders.

Scope and boundaries

• Wired RemoteActionStore + ActionSheetView into the production iOS app shell so remote pane actions present visible progress, interactive prompts, and terminal results.
• Expanded PaneControlsMenu to expose merge, create pull request, rename, browse files, rituals, stop, and close-and-cleanup actions with stale / in-flight disabling.
• Kept cleanup routed through PaneAction.CLOSE; the native cleanup confirmation only gates entry into the existing close workflow.
• Added deterministic fixture support for remote pane actions and published rituals so UI tests can exercise the production composition path.
• Did not change Beads state, GitHub mirror issue bodies, workflow/release/signing infrastructure, or merge behavior beyond the mobile presentation / invocation surface.

Risk class

• R1 — documentation or isolated tests
• R2 — product behavior
• R3 — authority, security, protocol, persistence, recovery, or consequential action
• R4 — release, governance, credentials, generated-source ownership, or cross-repository identity

Review docs/ROADMAP.md, docs/SUPPORT-MATRIX.md, docs/RELEASE-ACCEPTANCE.md, and docs/CONTRIBUTOR-SAFETY.md before making availability or production-readiness claims.

Validation and evidence

Command: xcodebuild test -project native/ios/Psyche.xcodeproj -scheme PsycheApp -destination 'platform=iOS Simulator,id=8E08D33E-D46E-40D6-921C-6B8475046CFC'
Result: Passed. Executed 36 UI tests (8 skipped, 0 failures) and the full PsycheApp scheme succeeded on commit 94a845586a416a9a1c406331a225bfa12644a551.

Command: xcodebuild test -project native/ios/Psyche.xcodeproj -scheme PsycheApp -destination 'platform=iOS Simulator,id=8E08D33E-D46E-40D6-921C-6B8475046CFC' -only-testing:PsycheAppUITests/PsycheAppUITests/testRenamingAPaneUsesTheRemoteActionSheet -only-testing:PsycheAppUITests/PsycheAppUITests/testCleanupConfirmationRoutesIntoRemoteCloseWorkflow -only-testing:PsycheAppUITests/PsycheAppUITests/testPaneActionsMenuListsRemoteLifecycleAndRitualActions
Result: Passed.

Command: xcodebuild test -project native/ios/Psyche.xcodeproj -scheme PsycheCore -destination 'platform=iOS Simulator,id=8E08D33E-D46E-40D6-921C-6B8475046CFC' -only-testing:PsycheCoreTests/ConnectionManagerTests/testStoredHostReconnectIsRefusedWhileReadinessIsRevoked
Result: Passed in a clean baseline worktree while checking an intermittent earlier failure.

Acceptance mapping:

• Stop and cleanup are visually / semantically distinct: CreatePaneFormTests.testStopAndCleanupMenuActionsStayDistinct and PsycheAppUITests.testPaneActionsMenuListsRemoteLifecycleAndRitualActions

• Destructive consequence text comes before the action button: ActionSheetPresentationTests.testSectionOrderKeepsContextBeforeContentAndControls, CreatePaneFormTests.testStopConfirmationSaysTheWorkSurvives, and CreatePaneFormTests.testCleanupConfirmationExplainsTheChoicesBeforeContinuing

• Stale or already-running actions are disabled: CreatePaneFormTests.testPaneControlsDisableHostActionsForStaleOrBusyState, RemoteActionStoreTests.testDuplicateResponseTapSendsExactlyOnceWhileFirstResponseIsBlocked, RemoteActionStoreTests.testSecondStartWhileFirstIsBlockedSendsNothingAndPreservesFirstWorkflow, and RemoteActionStoreTests.testBlockedStartShowsVisibleProgressUntilTheHostReplies

• Result / error / progress stay visible: RemoteActionStoreTests.testBlockedStartShowsVisibleProgressUntilTheHostReplies, RemoteActionStoreTests.testTransportFailureAfterInputPreservesRecoveryTextAndClearsBusy, RemoteActionStoreTests.testReturnedProtocolErrorBecomesVisibleError, ActionSheetPresentationTests.testFixtureRenameActionProducesInteractiveInputPresentation, and ActionSheetPresentationTests.testFixtureCleanupActionProducesChoicePresentation

• I added or identified focused coverage for the changed behavior.

• I ran the owning-surface checks and recorded their exact results.

• Required checks are terminal on the exact head SHA, or this PR remains draft.

• I did not treat test counts, source presence, hosted compilation, or simulator success as proof of an unobserved production path.

• I documented rollback, migration, and recovery implications where applicable.

Generated outputs

• No generated output changed.
• Generated output changed from its canonical source/generator and is reproducible without residual drift.

Security and privacy

• The change preserves project scope, authority, confirmation, receipt, revocation, idempotency, work preservation, and recovery contracts.
• Public text and artifacts contain no credentials, tokens, passwords, private keys, certificates, signing material, raw prompts, unrestricted terminal output, private repository contents, complete environment dumps, private service URLs, or unredacted personal paths.
• Suspected vulnerability details are in a private GitHub Security Advisory, not this PR.

Review focus

1. native/ios/PsycheApp/Sources/PsycheApp/Views/PaneControls.swift, CockpitView.swift, and ActionSheetView.swift for production composition, disabled-state gating, and confirmation semantics.
2. native/ios/PsycheCore/Sources/PsycheCore/State/RemoteActionStore.swift, RemoteActionPresentation.swift, and the fixture/test updates for visible progress, stale-response safety, and deterministic mobile action coverage.

Release and support impact

• No support or release claim changes.
• The support matrix, roadmap, release acceptance, changelog, and user-facing docs are updated consistently.

This is R3 iOS work touching consequential action UI and action-session presentation. It requires independent review before merge; do not merge on my approval alone.