Move Agent-Native under deps and return stable error envelopes.

HTTP failures now carry catalog codes and a trace id, and the parent replace directives are the only copies used at build time.

Co-authored-by: Cursor <cursoragent@cursor.com>

scripts/submodule-consistency.sh

@@ -0,0 +1,35 @@
+#!/bin/sh
+# 比较本仓 deps 与嵌套在 deps/agent-native 里的同名子模块 gitlink。
+# 编译只用本仓 go.mod 的 replace；这里防止两份副本锁到不同提交。
+set -eu
+cd "$(dirname "$0")/.."
+fail=0
+
+compare() {
+  label=$1
+  outer=$2
+  inner=$3
+  recorded=$(git rev-parse ":$outer")
+  nested=$(git -C deps/agent-native rev-parse "HEAD:$inner")
+  if [ "$recorded" != "$nested" ]; then
+    echo "mismatch $label outer=$recorded nested=$nested" >&2
+    fail=1
+  else
+    echo "ok $label $recorded"
+  fi
+}
+
+compare development-guidelines deps/development-guidelines deps/development-guidelines
+compare error-code-system deps/error-code-system deps/error-code-system
+compare logging-system deps/logging-system deps/logging-system
+
+recorded=$(git rev-parse :deps/agent-native)
+actual=$(git -C deps/agent-native rev-parse HEAD)
+if [ "$recorded" != "$actual" ]; then
+  echo "mismatch agent-native recorded=$recorded HEAD=$actual" >&2
+  fail=1
+else
+  echo "ok agent-native $recorded"
+fi
+
+exit "$fail"