Own-account subtree consent gate, deadline bound, and worker dispose fix

[johnthecat]

Three fixes on the own-account / desktop-host path.

Product subtree consent gate

Reason. A product requesting its own account takes no access review, so a cold subtree fetched from the Account Holder over SSO resolved with no seam the host could see or reject.

Intent. Let the host draw a rejectable prompt at that fetch.

Fix. New UserConfirmationReview::ProductSubtree(ProductSubtreeReview { product_id }), appended last so existing SCALE indices are untouched. On the own-account cold path the core calls confirm_user_action first: approve resolves over SSO, reject returns HostAccountGetError::Rejected. A cached subtree resolves locally with no prompt, and cross-product access keeps its existing account_access_authorization gate. Codegen and Swift bindings regenerated.

Bound remote authority calls at their deadline

Reason. remote_authority_call awaited the parked call after cancelling it. A call parked in the statement-store setup ignores the cancel token, so the await outlived the deadline and the request hung instead of failing.

Intent. A deadline that actually bounds the call, while still tearing the call down cleanly.

Fix. On cancel or timeout, race the call's unwind against a short grace, then drop it. In the normal case the call observes the cancellation and unsubscribes its statement streams within the grace; a call parked in the setup region is dropped at the grace rather than hanging.

Worker dispose ordering

Reason. disposeCore called free() in the same turn as dispose(). dispose() aborts the in-flight receiveFrame, but wasm-bindgen releases the borrow a microtask later, so free() threw "attempted to take ownership of Rust value while it was borrowed" and leaked the core on any mid-dispatch dispose.

Intent. Free without the borrow throw.

Fix. Track in-flight receiveFrame promises per core and await them after dispose(), before free().

[TarikGul]

Looking good, just a few comments. Feel free to ping me when its out of a draft.

[TarikGul]

🚀