Summary

• Rebase onto latest gcwing/main and keep this PR as a single commit.
• Move bitfun-core/product-full owner-crate propagation into the core feature graph instead of forcing owner product-full through dependency declarations.
• Keep tool-packs and product-domains optional in bitfun-core; no-default core now keeps product runtime surfaces gated while retaining remote workspace identity helpers.
• Add no-default disabled remote SSH/search surfaces and boundary-script anchors for the new feature gates.
• Update core decomposition docs and core AGENTS guidance to state that this is a runtime-surface boundary, not a completed dependency-light build or per-product feature matrix.

Guardrails

• No product crate feature set changed: desktop, CLI, and ACP still depend on bitfun-core with features = ["product-full"].
• default = ["product-full"] remains unchanged.
• No package/build/installer scripts were modified.
• No runtime owner migration or user-visible behavior change is claimed.

Validation

• node scripts/check-core-boundaries.mjs
• cargo check -p bitfun-core --no-default-features
• cargo check -p bitfun-core --features product-full
• cargo check -p bitfun-acp
• cargo check -p bitfun-cli
• cargo check -p bitfun-desktop
• cargo test -p bitfun-core --no-default-features --lib workspace_session_identity -- --nocapture
• cargo test -p bitfun-core core_product_domain_runtime_owner -- --nocapture
• cargo test -p bitfun-core core_service_agent_runtime_owner -- --nocapture
• cargo test -p bitfun-core remote_ -- --nocapture
• cargo test -p bitfun-services-integrations --features product-full
• cargo test -p bitfun-product-domains --features product-full
• cargo test -p bitfun-tool-packs --features product-full
• rustfmt --edition 2021 --check --config skip_children=true ...
• git diff --check gcwing/main..HEAD
• git diff -- package.json scripts/dev.cjs scripts/desktop-tauri-build.mjs scripts/ensure-openssl-windows.mjs scripts/ci/setup-openssl-windows.ps1 BitFun-Installer