Phase 2B: deserialize the parser into the wire model

[MGudgin]

Summary

This PR changes the config parser to deserialize directly into the typed wire model (wxc_common::wire::MxcConfig) instead of an intermediate set of permissive structs, so the JSON schema source of truth and the parser's trust boundary share a single definition of the wire shape and cannot drift.

What changed

• The parser deserializes both one-shot and state-aware requests straight into wire::MxcConfig, discriminating state-aware requests by the phase key and keeping the experimental block as a raw value for per-backend dispatch typing.
• The wire structs are the deserialization target; the intermediate structs and their conversion helpers are removed (a large net reduction in config_parser.rs).
• The boundary is strict by construction: invalid containment / network / clipboard / configurationId values are rejected, and unknown nested fields are rejected (deny_unknown_fields). Deprecated spellings (appcontainer, macos_sandbox, appContainer) are accepted via serde aliases.
• The wire module is always compiled as the parser target; its JsonSchema derive stays behind the schema-gen feature.
• The TypeScript SDK and the in-process mxc-sdk crate emit only fields the wire objects define: the container id is carried at top-level containerId and the teardown / preserve flags at lifecycle.destroyOnExit / lifecycle.preservePolicy, so processContainer.name, lxc.containerName, lxc.destroyOnExit, and filesystem.clearPolicyOnExit are no longer sent.
• Documentation (versioning.md, authoring-a-new-feature.md, schema-codegen.md, copilot-instructions.md, and the state-aware lifecycle docs) describes the wire-model parser.

Verification

• cargo test --workspace; cargo fmt --all -- --check; cargo clippy --workspace --all-targets -- -D warnings
• schema codegen + config corpus (169/169) + schema-version gates
• cd sdk && npm test

Microsoft Reviewers: Open in CodeFlow

[Copilot]

Pull request overview

This PR is Phase 2B of the versioning remediation: it rewires wxc_common’s config parsing to deserialize directly into the typed wire model (wire::MxcConfig) and removes the separate permissive Raw* serde structs, reducing drift risk between schema and parser.

Changes:

• Switch config parsing (one-shot and state-aware) to serde_json → wire::MxcConfig, then map wire → domain (ExecutionRequest / ParsedStateAwareRequest).
• Tighten the stable surface to strict enums + deny_unknown_fields at every stable level; keep the experimental surface permissive/forward-compatible.
• Remove processContainer.name emission from both the Rust mxc-sdk crate and the TypeScript SDK to match the strict wire model.

Show a summary per file

File	Description
src/core/wxc_common/src/wire.rs	Makes the wire types always-compiled, gates schema generation derives, and adds/adjusts aliases + permissiveness boundaries.
src/core/wxc_common/src/state_aware_request.rs	Removes Phase::from_wire now that phase parsing is handled via the wire enum.
src/core/wxc_common/src/lib.rs	Exposes wire unconditionally as the parser’s deserialization target.
src/core/wxc_common/src/config_parser.rs	Replaces Raw* deserialization + conversions with wire-model deserialization and wire→domain mapping for one-shot and state-aware.
src/core/mxc-sdk/src/policy.rs	Stops emitting processContainer.name in the Rust library’s config builder.
sdk/src/sandbox.ts	Stops emitting processContainer.name in the TS SDK policy→config builder.
schemas/dev/mxc-config.schema.0.8.0-dev.json	Updates generated schema to reflect the new permissive experimental nested structs.
docs/versioning.md	Updates documentation to reflect wire-model parsing and strict-enum behavior (including alias observability changes).
docs/state-aware-lifecycle/mxc-state-aware-sandbox-api.md	Updates state-aware spec text/examples to reflect wire::MxcConfig as the Rust mirror/parse target.
docs/state-aware-lifecycle/mxc-state-aware-sandbox-api-overview.md	Same: aligns overview with the new wire-model parse flow.
docs/schema-codegen.md	Updates roadmap/status now that the parser is wired to the wire model and Raw structs are gone.
docs/nanvix-microvm/nanvix-integration-plan.md	Updates the plan references to reflect the wire-model-based parser flow.
docs/bwrap-support/bubblewrap-backend-plan.md	Marks older Raw-struct steps as superseded; points to wire-model approach.
docs/authoring-a-new-feature.md	Updates the feature-authoring checklist to edit wire model + regenerate schema, then map wire→domain.
.github/copilot-instructions.md	Updates repository conventions/docs to reflect the new config parsing flow and feature-authoring steps.

Copilot's findings

• Files reviewed: 15/15 changed files
• Comments generated: 0

[bbonaby]

some of these ones can also have the from<T> added for them as well.

• wire::ClipboardPolicy -> ClipboardPolicy,
• wire::NetworkEnforcement-> NetworkEnforcementMode
• wire::NetworkPolicy-> NetworkPolicy
• wire::Containment -> ContainmentBackend

Then for wire_ui_isolation_str we'd probably want a to_string() function in the enum itself kind of like what we do here:

mxc/src/core/wxc_common/src/models.rs

Line 50 in 22f8a46

pub fn wire_name(&self) -> &'static str {