…d actions

Every detected call now records automatically (plans/auto-record.md,
Phase 1 + Phase 2 cutover). The pre-call start prompt and its recovery
machinery are deleted.

- DetectionEngine gates candidates through AutoRecordPolicy evidence:
  native apps on probe evidence unchanged; browsers on a meeting-domain
  tab match (BrowserTabInspector, 2s-bounded AppleScript) or calendar
  overlap plus 30s sustained mic. Nil probe samples reset the streak.
- startRecording factored into performStart(origin:presentation:);
  the silent path returns typed failures and never opens windows.
- stopRecording(initiator:discardRequested:) auto-discards detected
  EndGuard stops under the threshold (default 120s): Trash, no panel,
  no notification, candidate released for re-detection.
- EndCountdownWindow and the popover gained generation-scoped Discard;
  panel suppressed when projected duration stays under the threshold.
- Recents rows gained Discard: worker tasks tracked by directory,
  cancelled before trash; TranscriptionWorker declines vanished
  directories as cancelled and never recreates them.
- Detected sessions skip the saved-notification window.
- Browser automation grants pre-warm at launch.
- Settings: auto-record toggle, threshold picker, consent line;
  fresh-install engine default flipped to local. Stored blobs intact.
- TrustState input renamed detectionPromptActive -> detectionAwaitingAction.

627 tests, 0 failures.

- Three-way tab verdict (meeting/notMeeting/unreadable): an inspected
  non-meeting tab never takes the calendar-plus-mic fallback. Pinned by
  policy and engine tests (YouTube + calendar + 30s mic must not fire).
- Tab dialects live on MeetingApps allowlist entries; the bundle-ID
  switch in BrowserTabInspector is deleted. Prewarm uses the dialect.
- Both detection gates (shouldRecord, isDefinitelyNotInAMeeting) sit on
  AutoRecordPolicy; the engine only collects evidence.
- SkipState and DetectionEngine.suppress deleted with the pre-call
  prompt they served. PromptNotificationCoordinatorCore trimmed to the
  end-prompt half; StartPromptCoordinator renamed EndPromptCoordinator.
- Parked detection is one value (parkedCandidate): staged for auto and
  manual starts, restored on failed silent starts, cleared by
  ended-candidate. Trust icon derives from it; no companion flag.
- StartPresentation deleted: performStart(origin:staged:) derives the
  interactive/silent distinction from the origin alone.
- keepStoppedSession extracted: the trash-failure fallback runs the
  exact keep tail instead of a stale copy.
- One inflight table keyed by optional directory; Recents Discard
  cancels by lookup. TranscriptionWorker re-checks a vanished directory
  after every await, including mid-engine-call (new gated test).
- Stop HUD Discard is a required action; header comment rewritten.
  Idle popover copy follows the live autoRecordEnabled setting.
- SPEC.md amended in the same cutover: State Machine, Auto-Record
  section, defaults, drift list, and open questions no longer describe
  the deleted prompt.

625 tests, 0 failures.

# Conflicts:
#	Sources/TranscriberCore/Engines/LocalModelManager.swift