v0.8.6: general mode, clipboard text, PDF text extraction

Working mode: --mode coding|general (CST_MODE, settings.json, /mode,
WebUI run settings). general swaps the default framing for a general
assistant one -- workflow, safety notes, tool wording (run_shell, the
subagents) -- and /status shows it; minimal (the paper profile) stays
byte-frozen. The prompt state carries the mode so a switch leaves a
system note in history.

Clipboard: clipboard_read / clipboard_write tools (16 MiB cap read,
default 64 KiB window; writing is a WRITE permission with a preview) on
pbcopy / wl-copy / xclip / pbpaste / wl-paste / xclip and the Win32
clipboard. In the TUI, /attach paste falls back to clipboard text when
there is no image on it.

PDF: a dependency-free text extractor (src/pdf_text.c): inflate,
Flate/ASCIIHex/ASCII85, PNG/TIFF predictors, layout-independent object
scan, object streams, page tree walk with inherited resources, content
lexer (Tj/TJ/'/" and the Td/TD/T*/Tm spacing heuristics), per-font
ToUnicode CMaps and inline images skipped. Encrypted files and pages
with no text layer are refused with the reason.

Attachments: /attach (a path or files dropped on the terminal) now take
images, PDFs and text. A PDF is stored as its text layer with the mime
still saying application/pdf and its page count; anything else has to be
UTF-8 text. Documents travel inline as text parts, so CST_NO_IMAGES and
text-only models no longer drop them, while images keep their old path.

Tests: test_pdf_text (plain, bare and zlib-framed Flate, inline image,
CID + ToUnicode, object stream, error paths), documents in test_attach,
inlined documents in test_llm_body, mode in test_config.

include/cst_pdf.h

@@ -0,0 +1,27 @@
+#ifndef CST_PDF_H
+#define CST_PDF_H
+
+#include <stddef.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+/* Text layer of a PDF, in page order, with no external dependency (no
+ * poppler, no zlib): classic objects and object streams, FlateDecode plus
+ * ASCIIHex/ASCII85, PNG/TIFF predictors, Tj/TJ/'/" text with per-font
+ * ToUnicode CMaps and a WinAnsi / Latin-1 fallback. Scanned pages have no
+ * text layer and are reported as such.
+ * Returns a malloc'd NUL-terminated UTF-8 string, or NULL with err filled in
+ * ("PDF is encrypted ...", "no extractable text ..."). *pages (optional) gets
+ * the page count; the result is truncated at CST_PDF_TEXT_MAX bytes. */
+char *cst_pdf_text(const void *data, size_t n, int *pages, char *err,
+                   size_t err_sz);
+
+#define CST_PDF_TEXT_MAX (4u * 1024u * 1024u)
+
+#ifdef __cplusplus
+}
+#endif
+
+#endif