refactor(resource): extract provider protocol crate

[schickling-assistant]

Problem

Resource wire messages and codecs were owned by the st2 supervisor crate, forcing every native provider runtime to depend on supervisor implementation details and encouraging duplicate protocol copies.

Goal

Make one upstream crate the wire authority while preserving the existing st2 API surface and current native session-driver graph authority.

Decisions

• Add st2-resource-protocol as a wire-only crate owning resource message types, validation, and JSON-line codecs.
• Keep existing st2 public imports working through re-exports; no parallel protocol or compatibility shim is introduced.
• Preserve the native driver graph and Codex support from merged feat: expose authoritative agent graph primitives #390 and Admit codex-cli 0.151.0 #394.
• Make invalid Resource DING subjects actionable without changing graph/session-driver ownership.

Verification

• nix develop -c env CI=1 cargo test -p st2-resource-protocol — 7 passed.
• Confirmed merge commits for feat: expose authoritative agent graph primitives #390 (7b14815b…) and Admit codex-cli 0.151.0 #394 (af9e20ca…) are ancestors of 88fbe48c1092129d059dc79ddd0b242c11127e49.

Complexity

No additional runtime process or state owner is introduced. The new crate is a pure wire/codec boundary; the supervisor continues to own graph and session-driver behavior.

Concerns

None known.

Friction & bottlenecks

None.

Follow-ups

The dependent dotfiles stack consumes this exact upstream revision and owns the shared provider runtime plus thin resource adapters.

References

• Depends on Make catalog delivery facts authoritative #399.
• Supersedes feat(resource): add runtime protocol SDK and semantic invalidations #392.
• Dependent dotfiles stack: schickling/dotfiles#2217.

Posted on behalf of @schickling

field	value
agent_identity	dev3.direct.omp.jmg9x29x
session	dev3.jmg9x29x
agent_persona	generalist
agent_supervisor	unavailable
agent_tool	OMP
agent_tool_version	18.0.11
agent_runtime	OMP 18.0.11
tooling_profile	dotfiles@2161b9c