Merge PR #9: harden company resume, external sessions, and Office UI i18n

Merges xiaodong-l's hardening work: company suspend-checkpoint resume
reconciliation, external session token lifecycle fixes, Windows launch
shims, codex shell_environment_policy forwarding, Office UI i18n
(en/zh-CN), and two org presets. frontend_dist is rebuilt from the
merged sources in this commit so the #11 runtime-status fixes and the
i18n bundle coexist.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

# Conflicts:
#	opc/plugins/office_ui/frontend_dist/assets/index-BgyI65M_.js
#	opc/plugins/office_ui/frontend_dist/index.html

opc/database/store.py

@@ -3952,6 +3952,23 @@ class OPCStore:
                 current = {}
             if token_record is None:
                 current.pop(agent, None)
+                legacy_agent = str(
+                    current.get("external_resume_agent_type")
+                    or (
+                        current.get("selected_execution_agent")
+                        if current.get("external_resume_session_id")
+                        else ""
+                    )
+                    or ""
+                ).strip()
+                if legacy_agent == agent:
+                    for key in (
+                        "external_resume_session_id",
+                        "external_resume_session_scope_id",
+                        "external_resume_agent_type",
+                        "resume_source_session",
+                    ):
+                        current.pop(key, None)
             else:
                 current[agent] = {
                     str(k): v for k, v in dict(token_record).items()