feat(shipote): multi-core CPU% + quota report + restart-on-failure (fase K)

- WorkspaceStats.cpu_cores via sysconf cacheado. CLI muestra
  `cpu_pct: 98.7 % (24.7% total / 4 cores)`.
- workspace_quota compara SomaSpec.rlimits contra accounting actual.
  Reporta breaches humanos. NO enforcement automático en v1.
- run_with_options(.., restart_on_failure): si exit != 0, reaper
  relaunch con backoff exponencial 200ms → 30s cap. Inner.restart_specs
  persiste el spec entre intentos.

81 tests pasan (ente-incarnate 16, nouser-core 27, shipote-card 8,
shipote-core 22, shipote-discern 5, yahweh-provider-fs 3).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

crates/apps/shipote-daemon/src/main.rs

@@ -17,7 +17,8 @@ use shipote_core::WorkspaceManager;
 use shipote_discern::{DiscernPipeline, Hint};
 use shipote_protocol::{
     default_socket_path, read_frame, write_frame, CommandInfo as ProtoCommandInfo,
-    EdgeDiscernmentInfo, FlowInfo, Request, Response, WorkspaceStatsInfo, WorkspaceSummary,
+    EdgeDiscernmentInfo, FlowInfo, QuotaReportInfo, Request, Response, WorkspaceStatsInfo,
+    WorkspaceSummary,
 };
 use std::sync::Arc;
 use tokio::net::{UnixListener, UnixStream};
@@ -180,8 +181,11 @@ async fn dispatch(
             }
         }
 
-        Request::Run { workspace, exec, argv, envp } => {
-            match mgr.run(workspace, exec, argv, envp).await {
+        Request::Run { workspace, exec, argv, envp, restart_on_failure } => {
+            match mgr
+                .run_with_options(workspace, exec, argv, envp, restart_on_failure)
+                .await
+            {
                 Ok(s) => Response::RunStarted {
                     workspace,
                     command_id: s.id,
@@ -345,6 +349,7 @@ async fn dispatch(
                     rss_peak_bytes: s.rss_peak_bytes,
                     cpu_usec: s.cpu_usec,
                     cpu_percent: s.cpu_percent,
+                    cpu_cores: s.cpu_cores,
                     source: s.source,
                     uptime_ms: s.uptime_ms,
                 },
@@ -354,6 +359,19 @@ async fn dispatch(
             },
         },
 
+        Request::WorkspaceQuota { workspace } => match mgr.workspace_quota(workspace).await {
+            Some(q) => Response::WorkspaceQuota {
+                info: QuotaReportInfo {
+                    mem_limit: q.mem_limit,
+                    nproc_limit: q.nproc_limit,
+                    breaches: q.breaches,
+                },
+            },
+            None => Response::Error {
+                message: format!("workspace {workspace} not found"),
+            },
+        },
+
         Request::FlowList => {
             let items = mgr
                 .list_flow_pipelines()