fix(my-deepagent): v0.3 plan-conformance — 18-item gap fix across PR #2-#9

1차 v0.3 구현 후 plan-v0.3 와 대조해 발견된 18건 누락/명세 위반을 보강.
자기 리뷰 3 라운드 (누락·미완 / 오류·엣지케이스 / 과최적화) 모두 PASS.

PR #5 plan-mode (3건):
- BLOCKED_TOOLS_IN_PLAN_MODE 에 write_todos 추가
- /plan 시 system message inject (_PLAN_MODE_SYSTEM_PROMPT)
- /approve 시 마지막 assistant 메시지를 "approved plan" system 으로 inject
- InteractiveSession._pending_system_messages 인프라 신설

PR #2 compaction (1건):
- CompactionResult.summary_text 추가, 다음 thread 첫 ainvoke 에 inject

PR #3 auto-memory (6건):
- global memory dir + bootstrap
- frontmatter name/description/type 정식 도입 + MemoryEntry/MemoryType
- _infer_memory_type (keyword heuristic, no LLM)
- _scrub_secrets (OpenRouter/Anthropic/OpenAI/AWS/Bearer redaction)
- /memory show <name> 서브명령
- /remember [--global] / /forget [--global] 스코프 토글

PR #4 skills (3건):
- project_skills_dir + 두 스코프 (global / project) merge with last-wins
- /skill <name> 본문 inject (queue_system_message) — 이전엔 REPL 출력만
- /skills show <name> 별도 서브명령

PR #6 sub-agent (4건):
- budget.py `session:<uuid>` scope + CostMiddleware 자동 전달
- resolve_root_session_id walk-up (cycle guard) + sub-agent root 에 charge
- run_subagent_to_completion 실제 ainvoke + 결과 push to parent
- /agents 서브명령 구조 (list / spawn / show) + spawn 시 parent system msg

PR #7 governance (1건):
- bootstrap_user_dirs — instructions + global/memory + skills + projects 한
  호출로 idempotent 부트스트랩

PR #8 Web GUI (1건):
- index.html → 세션 목록, runs.html (신설) → workflow archive
- conversation.html ?session=<id> deep-link

PR #9 workflow integration (2건):
- /workflow 백그라운드 WorkflowEngine.run + 진행 메시지 stream 누적
- /binding show <workflow-name[@version]> 인자 지원

테스트 (+17, 685 → 702 passed):
- test_plan_mode: write_todos 차단 + blocklist sanity
- test_memory: scrub + type 추론 + override
- test_skills: project override + find_skill + resolve_skill_sources(pk)
- test_subagents: resolve_root_session_id chain + missing fallback
- test_budget: session: scope accumulation
- test_instructions: governance bootstrap + idempotency
- test_api_static: runs.html 신설 + index.html 재구성

게이트:
- ruff check / format --check / mypy: PASS (141 source files)
- pytest -q --ignore=tests/integration/test_e2e_workflow.py
  --ignore=tests/integration/test_openrouter_smoke.py: 702 passed

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

my-deepagent/static/app.js

@@ -657,8 +657,8 @@ async function createNewSession() {
   }
 }
 
-function bootstrapConversationPage() {
-  loadSessionList();
+async function bootstrapConversationPage() {
+  await loadSessionList();
   $conv("#new-session-btn").addEventListener("click", createNewSession);
   $conv("#session-picker").addEventListener("change", (ev) => {
     const sid = ev.target.value;
@@ -675,6 +675,63 @@ function bootstrapConversationPage() {
       sendMessage(ev.target.value);
     }
   });
+  // v0.3 PR #8: deep link `?session=<id>` auto-loads the named session.
+  const params = new URLSearchParams(window.location.search);
+  const deepSid = params.get("session");
+  if (deepSid) {
+    const picker = $conv("#session-picker");
+    if (picker) picker.value = deepSid;
+    loadAndAttachSession(deepSid);
+  }
+}
+
+// =============== sessions list (index.html as of v0.3 PR #8) ===============
+
+async function renderSessionsList() {
+  setError("");
+  let sessions;
+  try {
+    sessions = await jsonFetch("/sessions?limit=50");
+  } catch (e) {
+    setError(`세션 목록을 불러오지 못했습니다: ${e.message}`);
+    return;
+  }
+  const tbody = $("#sessions tbody");
+  if (!tbody) return;
+  tbody.replaceChildren();
+  if (sessions.length === 0) {
+    tbody.appendChild(
+      emptyCell(5, "아직 대화한 세션이 없습니다.", "/conversation.html", "새 대화 시작 →")
+    );
+    return;
+  }
+  for (const s of sessions) {
+    const tr = document.createElement("tr");
+    const idTd = document.createElement("td");
+    const idLink = document.createElement("a");
+    idLink.href = `/conversation.html?session=${s.id}`;
+    idLink.className = "mono";
+    idLink.textContent = s.id.slice(0, 8) + "…";
+    idTd.appendChild(idLink);
+    const stateTd = document.createElement("td");
+    stateTd.appendChild(badge(s.state));
+    const titleTd = document.createElement("td");
+    titleTd.textContent = s.title || "(no title yet)";
+    const personaTd = document.createElement("td");
+    personaTd.className = "mono";
+    // SessionSummary exposes `persona_id` (UUID) — show first 8 chars + tooltip.
+    if (s.persona_id) {
+      personaTd.textContent = s.persona_id.slice(0, 8) + "…";
+      personaTd.title = s.persona_id;
+    } else {
+      personaTd.textContent = "—";
+    }
+    const lastTd = document.createElement("td");
+    lastTd.className = "mono";
+    lastTd.textContent = (s.last_message_at || s.started_at || "").slice(0, 19).replace("T", " ");
+    tr.append(idTd, stateTd, titleTd, personaTd, lastTd);
+    tbody.appendChild(tr);
+  }
 }
 
 // =============== bootstrap ===============
@@ -682,6 +739,8 @@ function bootstrapConversationPage() {
 document.addEventListener("DOMContentLoaded", () => {
   const page = document.body.dataset.page;
   if (page === "index") {
+    renderSessionsList();
+  } else if (page === "runs") {
     renderRunsList();
     renderBudgetSummary();
   } else if (page === "new") {