feat(classroom): add SQLite persistence + security hardening

M11-03: Classroom data persistence
- New persist.rs: SQLite-backed ClassroomPersistence with open/load_all/save
- Schema: classrooms (JSON blob) + classroom_chats tables
- generate.rs: auto-persist classroom after generation
- chat.rs: auto-persist chat messages after each exchange
- mod.rs: init_persistence() for app setup integration

M1-01: Gemini API key now uses x-goog-api-key header
- No longer leaks API key in URL query params or debug logs

M1-03/04: Mutex unwrap() replaced with unwrap_or_else(|e| e.into_inner())
- MemoryMiddleware and LoopGuardMiddleware recover from poison

M2-08: Agent creation input validation
- Reject empty names, out-of-range temperature (0-2), zero max_tokens

M11-06: Classroom chat message ID uses crypto.randomUUID()

desktop/src-tauri/src/classroom_commands/chat.rs

@@ -53,6 +53,7 @@ pub async fn classroom_chat(
     store: State<'_, ClassroomStore>,
     chat_store: State<'_, ChatStore>,
     kernel_state: State<'_, KernelState>,
+    persistence: State<'_, crate::classroom_commands::persist::ClassroomPersistence>,
     request: ClassroomChatCmdRequest,
 ) -> Result<Vec<ClassroomChatMessage>, String> {
     if request.user_message.trim().is_empty() {
@@ -102,6 +103,11 @@ pub async fn classroom_chat(
 
         state.messages.push(user_msg);
         state.messages.extend(agent_responses.clone());
+
+        // Persist chat to SQLite
+        if let Err(e) = persistence.save_chat(&request.classroom_id, &state.messages).await {
+            tracing::warn!("[ClassroomChat] Failed to persist chat for {}: {}", request.classroom_id, e);
+        }
     }
 
     Ok(agent_responses)