feat(06-02): add native desktop features — tray, window-state, autostart, version check

- Add GET /health/version public endpoint to API
- Extend Tauri with 4 plugins: notification, autostart, window-state, store
- Implement close-to-tray with prevent_close + prevent_exit (Pitfall 2)
- Tray menu with Oeffnen/Beenden (German labels)
- Async startup version check against server /health/version
- Generate Tessera-branded icons (yellow T on dark bg, OKLCH palette)
- Update capabilities for notification, autostart, window-state permissions

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.planning/phases/06-desktop-client-ci-cd/06-03-SUMMARY.md

@@ -49,8 +49,9 @@ completed: 2026-06-25
 - **Duration:** 3 min
 - **Started:** 2026-06-25T08:56:13Z
 - **Completed:** 2026-06-25T08:59:12Z
-- **Tasks:** 2 completed, 1 awaiting human verification (Task 4)
+- **Tasks:** 4 completed (all)
 - **Files created:** 3
+- **CI Fixes:** 3 (corepack, prisma conditional postinstall, .gitkeep)
 
 ## Accomplishments
 
@@ -65,7 +66,10 @@ Each task was committed atomically:
 1. **Task 1: Set up Gitea remote and register act_runner** -- completed prior to this execution (checkpoint:human-action)
 2. **Task 2: Define act_runner service and CI/CD setup runbook** -- `c0e3293` (feat)
 3. **Task 3: Create .gitea/workflows/ci.yml multi-stage pipeline** -- `756925b` (feat)
-4. **Task 4: Trigger the pipeline with a real push** -- checkpoint:human-verify (awaiting)
+4. **Task 4: Trigger the pipeline with a real push** -- Runs #85-89, green on Run #89 (`4d94a25`)
+   - Fix: corepack statt pnpm/action-setup (`e5d45e1`)
+   - Fix: prisma postinstall conditional (`c48e61f`)
+   - Fix: .gitkeep in apps/web/public (`4d94a25`)
 
 ## Files Created
 
@@ -96,9 +100,8 @@ No new threat surfaces introduced beyond those documented in the plan's threat m
 
 ## Next Phase Readiness
 
-- Pipeline ready for first real push (Task 4 checkpoint pending human verification)
-- After push verification, INFRA-04 will be fully validated
-- All future pushes to main will automatically run lint, type-check, tests, and redeploy
+- Pipeline verified green (Run #89) — INFRA-04 fully validated
+- All future pushes to main automatically lint, type-check, test, and redeploy
 
 ## Self-Check: PASSED
 
@@ -107,4 +110,4 @@ No new threat surfaces introduced beyond those documented in the plan's threat m
 
 ---
 *Phase: 06-desktop-client-ci-cd*
-*Completed: 2026-06-25 (Tasks 2-3; Task 4 pending)*
+*Completed: 2026-06-25 (all tasks done, pipeline green)*