feat: Hermit 1.1.0 — HERMIT_* env, Tauri desktop shell

Wire hermit_getenv across the engine, rebrand WebUI/systemd/docs, and
add apps/desktop (Tauri 2 + React) with a DeepSeek-Harness-like UI.
Qt app/ is frozen; full libcstcore FFI is scaffolded behind --features engine.

Co-authored-by: Cursor <cursoragent@cursor.com>

tests/test_sandbox.c

@@ -4,6 +4,7 @@
 
 #include "cst_perms.h"
 #include "cst_sandbox.h"
+#include "cst_hermit_glyph.h"
 
 #include <stdio.h>
 #include <stdlib.h>
@@ -353,7 +354,7 @@ int main(void) {
   if (kind == CST_SANDBOX_LANDLOCK || kind == CST_SANDBOX_SECCOMP)
     test_confined(kind);
   if (kind != CST_SANDBOX_SECCOMP) {
-    const char *was = getenv("CST_SANDBOX");
+    const char *was = hermit_getenv("SANDBOX");
     char saved[32] = "";
     if (was)
       snprintf(saved, sizeof(saved), "%s", was);