feat(domain): project verified runtime policy to desktop

product-source/guanghu-knowledge-base/server/domain-access-orchestrator.ts

@@ -4,6 +4,7 @@ import {
   type DomainAccessEvidence,
   type DomainNodeType,
   type DomainAccessStatus,
+  type DomainRuntimePolicyProjection,
 } from './domain-access.js';
 import {
   TrustedSignerSnapshotLoader,
@@ -57,6 +58,7 @@ export interface DomainAccessProjection {
   nodeId: string;
   nodeType: DomainNodeType;
   nodeRegistrationSource: Readonly<NodeRegistrationSnapshotReceipt>;
+  runtimePolicy?: DomainRuntimePolicyProjection;
   runtimeReady: boolean;
   stage: DomainAccessStatus['stage'];
   trustSource: Readonly<TrustedSignerSnapshotReceipt>;