fix(cli): filter isMeta and isCompactSummary messages in local and remote mode

[hqhq1025]

Summary

When Claude Code loads a skill, it injects the full skill content as a user message with isMeta: true. This message bypasses existing filters in both local and remote mode, causing the full skill text to render as a regular chat message in the web UI.

Root cause

Verified by inspecting real JSONL session data — skill injection messages have this structure:

{ "type": "user", "isMeta": true, "message": { "content": [{ "type": "text", "text": "# Full skill content..." }] } }

• Local mode (claudeLocalLauncher): only filtered summary and invisible system messages — isMeta user messages passed through
• Remote mode (OutgoingMessageQueue): only filtered type === 'system' — skill injections have type: 'user' and slipped through

Also adds isCompactSummary filtering at the source for consistency with the web normalizer (normalizeAgent.ts:201-202), which already checks both fields.

Changes

File	Change
claudeLocalLauncher.ts	Add isMeta and isCompactSummary checks before sending
OutgoingMessageQueue.ts	Add isMeta and isCompactSummary checks in send filter
claudeLocalLauncher.test.ts	+2 tests (isMeta, isCompactSummary)
OutgoingMessageQueue.test.ts	New file, 4 tests covering all filter conditions

Relates to #235

Test plan

• 10 unit tests: local launcher (6) + outgoing queue (4), all passing
• bun run typecheck passes
• Load a skill in local mode, confirm skill content no longer appears as chat text
• Load a skill in remote mode, confirm same
• Confirm normal messages, tool calls, and visible system events (api_error) still display correctly

[github-actions]

Findings

• None.

Summary
Review mode: initial. No issues found in modified lines. Residual risk: runtime behavior depends on message flags; manual local/remote UI verification not run.

Testing

• Not run (automation)

HAPI Bot

[github-actions]

Findings

• None.

Summary
Review mode: follow-up after new commits. No issues found in modified lines. Residual risk: runtime behavior depends on message flags; manual local/remote UI verification not run.

Testing

• Not run (automation)

HAPI Bot