Merge branch 'next' into kimi-runtime-support

.changeset/happy-finches-travel.md

@@ -0,0 +1,5 @@
+---
+type: Fixed
+pr: 863
+---
+**`/gsd-manager` and `/gsd-autonomous --interactive` no longer silently skip worktree isolation and independent verification on Claude Code.** They dispatched plan/execute as background agents, but a backgrounded Claude Code agent has no Agent/Task tool and cannot spawn the nested executors, plan-checker, or verifier — so isolation and verification silently never ran. Both workflows now resolve the runtime and run plan/execute inline on Claude Code (background dispatch is kept on runtimes that support nested subagents).

.changeset/humble-deer-gather.md

@@ -0,0 +1,5 @@
+---
+type: Fixed
+pr: 862
+---
+**Installer no longer leaks `gsd-cmd-rewrites-*` temp directories.** Each install that emitted slash commands left one `fs.mkdtempSync` directory under the system temp root; on `tmpfs` `/tmp` hosts these accumulated and consumed RAM-backed storage. `installRuntimeArtifacts()` now removes the temp copy in a `finally` once command files are copied.

.changeset/runtime-install-no-drift-tests.md

@@ -0,0 +1,6 @@
+---
+type: Changed
+pr: 867
+---
+Added no-drift guard tests (`tests/issue-57-runtime-install-no-drift.test.cjs`) that protect the Runtime Install Policy Module boundary (ADR-58) and the explicit Runtime Config Adapter Registry (#60). They fail loudly when supported-runtime metadata is added to an installer call site (`allRuntimes`, the interactive `runtimeMap` menu) without a matching registry adapter entry, or when config-mutation dispatch escapes the registry's declared install surfaces — catching reintroduction of the scattered per-runtime branching those seams removed.
+<!-- docs-exempt: test-only — adds architecture-guard tests, no user-facing behavior, command, or config change -->