feat(cli): expose ACP session configuration

[Sun-GLiang]

Summary

• Return exactly four ordered ACP select configOptions from the Runtime Host's committed Session projection for every successful session/new: permission mode, thinking level, collaboration mode, and orchestration mode.
• Track Session ownership per ACP connection without opening Runtime Host subscriptions; session/list never grants ownership.
• Implement ACP v1 session/set_config_option through the official SDK route, validating ownership, id, type, and value before Host I/O.
• Apply each live change as a one-field SessionConfigurationPatch CAS update, preserving model selection and unrelated fields, with at most three attempts on revision conflicts.
• Keep session/set_mode unsupported and unadvertised.

Refs #3132
Depends on #3744 (merged)

Review dependency

• Rebuilt on current main at 1581dc1c4 after feat(cli): add ACP session creation and listing #3744 merged, so this PR contains only the PR3 delta.
• Scope is limited to the ACP CLI layer and its tests; no Runtime Host or design-document changes are included.

Verification

• npm run build
• Focused ACP suites — 51 passed, 0 failed.
• TMPDIR=/private/tmp npm --workspace maka-agent run test:dist — 765 tests: 762 passed, 3 skipped, 0 failed.
• npm run typecheck
• npm run lint
• npm run format:check
• npm run check:asf-headers
• git diff upstream/main --check
• Independent final review found no Critical, Important, or Minor findings.

AI use

Select exactly one:

• No generative tool made a substantive contribution
• Generative tooling made a substantive contribution

Tool(s) and scope: Codex assisted with design, implementation, tests, verification, checklist alignment, and review. Every PR3 commit includes a Generated-by: Codex trailer.

Checklist

• Tests cover the change and fail without it
• Build, lint, format, typecheck, ASF headers, and affected/full CLI suites pass locally

Does this PR entail a change in behavior?

• Yes — described under Summary above
• No