feat: ship single-file run distribution and list key reset

Compile-time run auth replaces zip sidecars, lengthens run keys, revokes
active sessions on reset, and exposes run-key reset in the server list.

platform_web/components/RuntimeTaskProgress.tsx

@@ -77,6 +77,13 @@ export const runtimeUpdateStages: RuntimeTaskStage[] = [
   { key: "job_track", label: "等待确认", description: "记录 job id 并刷新后台任务状态。" }
 ];
 
+export const runtimeKeyResetStages: RuntimeTaskStage[] = [
+  { key: "scope_check", label: "权限校验", description: "确认当前账号可以重置该服务器的 run 密钥。" },
+  { key: "confirm_reset", label: "确认重置", description: "记录本次密钥轮换并撤销旧 run 会话。" },
+  { key: "key_rotate", label: "轮换密钥", description: "生成新密钥代际并撤销旧发行物。" },
+  { key: "regenerate_hint", label: "等待重发", description: "提示重新生成并部署新的 run 可执行文件。" }
+];
+
 export const runtimeDependencyStages: RuntimeTaskStage[] = [
   { key: "profile_read", label: "读取声明", description: "读取插件声明的 probe 和 install plan。" },
   { key: "env_probe", label: "环境检查", description: "让 run 节点评估当前运行环境。" },