feat(arcrun): implement arcrun MVP — open-source AI workflow engine

Phase 1-5 complete per .agents/specs/u6u-core-mvp/:

**Phase 1 — Cherry-pick & cleanup**
- Create arcrun/ from cypher-executor, credentials, builtins, registry
- Remove 9 InkStone Service Bindings (KBDB, REGISTRY, CLINIC_*, AICEO, MINI_ME)
- Rewrite component-loader: 3-layer (builtin → WASM_BUCKET R2 → error)
- Remove autoPublishMissing.ts, proxy.ts (AICEO), execution-logger.ts (KBDB)
- Clean all KV namespace IDs and InkStone internal URLs from config files

**Phase 2 — contract.yaml completeness**
- Add credentials_required to gmail, google_sheets, telegram, line_notify
- Add config_example to all 21 components with annotated field descriptions

**Phase 3 — Credential injection**
- Add credential-injector.ts: AES-GCM decrypt from CREDENTIALS_KV
- Integrate into GraphExecutor before WASM execution
- Structured errors with repair instructions when credential missing

**Phase 4 — CLI (acr)**
- cli/package.json: arcrun package, bin: acr, deps: commander/js-yaml/chalk/ora
- 8 commands: init, creds push, push, run, validate, parts, list, logs
- Standard mode: writes directly to user's CF KV via CF REST API
- acr init: interactive setup with arcrun.dev API Key registration

**Phase 5 — Open source release prep**
- README.md: 5-minute quickstart, component table, workflow YAML syntax
- CONTRIBUTING.md: TinyGo dev env, component scaffolding, submission flow
- Security audit: no InkStone internal URLs/IDs in committed files
- .gitignore: exclude credentials.yaml, .wrangler, *.wasm

https://claude.ai/code/session_01BnCdSLVH8tUed9VrrPavgT

registry/src/routes/query.ts

@@ -0,0 +1,43 @@
+// GET /components/:id — 取得零件最優版本合約
+// GET /components/:id/versions — 取得所有版本清單（含評分）
+// GET /components/search?q=... — 語意搜尋零件
+// Requirements: 12.2, 12.3
+
+import { Hono } from 'hono';
+import type { Bindings } from '../types';
+import { getComponent, getComponentVersions, searchComponents } from '../actions/queryComponents';
+
+const app = new Hono<{ Bindings: Bindings }>();
+
+// 語意搜尋（必須在 /:id 之前，避免 "search" 被當作 id）
+app.get('/search', async c => {
+  const q = c.req.query('q');
+  if (!q || q.trim() === '') {
+    return c.json({ success: false, error: 'q 參數必填' }, 400);
+  }
+
+  const results = await searchComponents(q.trim(), c.env);
+  return c.json({ success: true, data: { results, count: results.length } });
+});
+
+// 取得所有版本
+app.get('/:id/versions', async c => {
+  const id = c.req.param('id');
+  const versions = await getComponentVersions(id, c.env);
+  if (versions.length === 0) {
+    return c.json({ success: false, error: `零件 ${id} 不存在` }, 404);
+  }
+  return c.json({ success: true, data: { versions, count: versions.length } });
+});
+
+// 取得最優版本
+app.get('/:id', async c => {
+  const id = c.req.param('id');
+  const component = await getComponent(id, c.env);
+  if (!component) {
+    return c.json({ success: false, error: `零件 ${id} 不存在` }, 404);
+  }
+  return c.json({ success: true, data: component });
+});
+
+export default app;