feat(maf): conversation-driven MAF roundtable (R1/R2) + server-owned stage-3 dispatch

Backend:
- Conversation API at /api/maf-roundtable/conversations: create/list/detail,
  paginated messages, atomic send+run start, owner-only isolation,
  admin read-only diagnostic access
- SSE real-time event stream (GET /conversations/{id}/stream) backed by
  ConversationEventHub + conversation_events store; multi-worker deployment doc
- Deterministic server-owned stage-3 dispatch contracts (dispatch_contracts.py):
  routing resolved from trusted MAF deployment config instead of manager-chosen
  agent ids; config.yaml keeps stage-3 routing deployment-owned
  (default_manager_agent_id / seat ids / business_routes / max_seats_per_run)
- Conversation persistence (conversations/messages stores) + v2 migration script
- Tests: conversations, conversation stream, migration, phase3 conversation dispatch

Frontend:
- Vitest test infra for MAF (vitest.maf.config.ts + test:maf script) with
  component tests for ApprovalCard/RunHeader/SessionsPage and use-maf-events
- Session form lib, flow-graph dialog / run-detail / sessions page updates,
  routes and nav tweaks
- Docs: R0 legacy interaction baseline mapping, updated implementation plan

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend-web/vitest.maf.config.ts

@@ -0,0 +1,32 @@
+/**
+ * Vitest 配置 —— 仅跑 MAF 模块的真实挂载测试（jsdom + Testing Library）。
+ *
+ * 设计：
+ *   - environment=jsdom 让 React 组件可挂载；
+ *   - 只 include `*.test.tsx`（组件挂载测试），现有 `*.test.ts`（node:test 纯函数）
+ *     保持原来的 esbuild + node --test 路径，互不干扰；
+ *   - 复用项目 tsconfig 的 `@/*` → `./src/*` 别名；
+ *   - 不引入 CDN / 在线服务，所有依赖本地安装并锁入 lockfile。
+ */
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { defineConfig } from "vitest/config";
+import react from "@vitejs/plugin-react";
+
+const here = path.dirname(fileURLToPath(import.meta.url));
+
+export default defineConfig({
+  plugins: [react()],
+  resolve: {
+    alias: {
+      "@": path.resolve(here, "src"),
+    },
+  },
+  test: {
+    environment: "jsdom",
+    globals: true,
+    // 只跑 MAF 的组件挂载测试（.test.tsx）；纯函数 .test.ts 仍走 esbuild+node --test
+    include: ["src/maf-roundtable/**/*.test.tsx"],
+    exclude: ["**/node_modules/**", "**/dist/**"],
+  },
+});