feat(hololake): add domain-routed language membrane and user PNCC

product-source/hololake-native-desktop/contracts/local-development-bridge.json

@@ -12,6 +12,8 @@
     "transport_is_authority": false
   },
   "mcp_role": "OPTIONAL_EXTERNAL_TOOL_ADAPTER_NOT_CONTINUITY_OR_AUTHORITY_ROOT",
+  "nearby_ai_discovery_contract": "contracts/nearby-ai-discovery.json",
+  "circular_lake_membrane_contract": "contracts/circular-lake-membrane.json",
   "external_ai_entry": {
     "mcp_may_bootstrap_discovery": true,
     "direct_local_protocol_preferred_after_discovery": true,
@@ -64,6 +66,9 @@
     "cursor_is_bound_to_subject_object_version_and_query": true
   },
   "security": {
+    "protocol_external_input_discarded_before_language_runtime": true,
+    "visitor_natural_language_is_expression_only": true,
+    "visitor_session_has_system_authority": false,
     "raw_account_identifier_in_storage_path": false,
     "caller_selected_bridge_storage_root": false,
     "credentials_exposed_to_programming_ai": false,