[ATAC-Helicopter]

Summary

• Add versioned SQLite storage for stable application identity and allowlisted evidence.
• Persist user-defined name and icon overrides without storing raw process context; opaque fallback keys protect path-derived identities.
• Apply overrides to live CLI app snapshots and add profile commands to set or clear them.
• Extend persistence, resolver, CLI, and isolated PipeWire integration coverage.

Closes #27.

Verification

• ./scripts/test.sh — passed locally (87 managed tests, native lifecycle, isolated PipeWire integration, roadmap audit, tooling tests, formatting).
• GitHub Actions will be canceled because the account has exhausted Actions minutes. This PR does not claim remote CI qualification.