Route hosting tools through TinyHosts module

[senamakel]

OpenHuman's hosting tools now run through the pinned TinyHosts v0.3.0 module contract. The host keeps credential resolution, workspace authorization, and tool policy; the provider implementation is no longer linked into OpenHuman. Credential-bearing Execute calls use confidential TinyBus delivery, and operation replies are checked against their typed result variants.

The change also adds shared ModuleClient support for configured call deadlines and safe decoding of serialized JSON replies. The TinyHosts adapter preserves the existing tool names and declarations, refuses forbidden workspace paths before a bus call, and has no provider-implementation fallback. Account::connect retains its arity and forwards workspace configuration; connect_with_config supports custom module roots and policy. Account::host() is removed because its return type exposed the implementation crate.

The native artifact fixture uses OpenHuman's explicit module override and loader to query Providers and send confidential PrepareBundle for temporary local HTML. It validates the typed snapshot and exact file bytes without contacting a hosting provider.

Dependencies: #7292 (module-boundary foundation), #7342 (module failure reporting), and #7356 (shared connector/module-client integration). This PR is intentionally a draft until those dependencies land.

Validation:

• Stable 1.99 hosting + crash-reporting tests: 23 passed.
• Released TinyHosts v0.3.0 native artifact through OpenHuman's loader: 1 passed.
• Stable no-default-features check passed.
• Offline module-boundary audit: 0 violations, 0 stale exceptions; migration remains incomplete with 31 temporary exceptions and 1 pending contract.
• git diff --check passed.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}