fix(audit): 修复深度审计发现的 P0/P1 问题 (8项)

基于 DEEP_AUDIT_REPORT.md 修复 2 CRITICAL + 4 HIGH + 1 MEDIUM 问题:

- C1: PromptOnly 技能集成 LLM 调用 — 定义 LlmCompleter trait，
  通过 LlmDriverAdapter 桥接 zclaw_runtime::LlmDriver，
  PromptOnlySkill.execute() 现在调用 LLM 生成内容
- C2: 反思引擎空记忆 bug — 新增 query_memories_for_reflection()
  从 VikingStorage 查询真实记忆传入 reflect()
- H7: Agent Store 接口适配 — KernelClient 添加 listClones/createClone/
  deleteClone/updateClone 方法，映射到 agent_* 命令
- H8: Hand 审批检查 — hand_execute 执行前检查 needs_approval，
  需审批返回 pending_approval 状态
- M1: 幽灵命令注册 — 注册 hand_get/hand_run_status/hand_run_list
  三个 Tauri 桩命令
- H1/H2: SpeechHand/TwitterHand 添加 demo 标签
- H5: 归档过时 VERIFICATION_REPORT

文档更新: DEEP_AUDIT_REPORT.md 标记修复状态，README.md 更新
关键指标和变更历史。整体完成度从 ~50% 提升至 ~58%。

desktop/src/lib/kernel-client.ts

@@ -362,6 +362,65 @@ export class KernelClient {
     return invoke('agent_delete', { agentId });
   }
 
+  // === Clone/Agent Adaptation (GatewayClient interface compatibility) ===
+
+  /**
+   * List clones — maps to listAgents() with field adaptation
+   */
+  async listClones(): Promise<{ clones: any[] }> {
+    const agents = await this.listAgents();
+    const clones = agents.map((agent) => ({
+      id: agent.id,
+      name: agent.name,
+      role: agent.description,
+      model: agent.model,
+      createdAt: new Date().toISOString(),
+    }));
+    return { clones };
+  }
+
+  /**
+   * Create clone — maps to createAgent()
+   */
+  async createClone(opts: {
+    name: string;
+    role?: string;
+    model?: string;
+    personality?: string;
+    communicationStyle?: string;
+    [key: string]: unknown;
+  }): Promise<{ clone: any }> {
+    const response = await this.createAgent({
+      name: opts.name,
+      description: opts.role,
+      model: opts.model,
+    });
+    const clone = {
+      id: response.id,
+      name: response.name,
+      role: opts.role,
+      model: opts.model,
+      personality: opts.personality,
+      communicationStyle: opts.communicationStyle,
+      createdAt: new Date().toISOString(),
+    };
+    return { clone };
+  }
+
+  /**
+   * Delete clone — maps to deleteAgent()
+   */
+  async deleteClone(id: string): Promise<void> {
+    return this.deleteAgent(id);
+  }
+
+  /**
+   * Update clone — not supported in KernelClient mode
+   */
+  async updateClone(_id: string, _updates: Record<string, unknown>): Promise<{ clone: unknown }> {
+    throw new Error('Agent update is not supported in local kernel mode');
+  }
+
   // === Chat ===
 
   /**