arcrun — AI workflow execution engine (clean history)

Self-hosted 開源：WASM 零件 + recipe + cypher-executor，跑在你自己的 Cloudflare。

此為重建的乾淨歷史起點（移除曾誤 commit 的 GCP SA 金鑰，舊歷史保留在
richblack/arcrun 與本地 backup 分支）。含：
- acr init --self-hosted installer（建 KV/R2 + codeload 拉預編譯 wasm + wrangler deploy + seed recipe）
- recipe push 把關（資料外流提醒 + 打通檢查）
- 19 個正當零件預編譯 wasm（claude_api/km_writer/kbdb_upsert_block 排除：違反 DECISIONS §1）
- CLI / cypher-executor / registry / 完整 SDD

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

landing/app/components/apps.ts

@@ -0,0 +1,54 @@
+// Matrix App Launcher 九宮格清單
+// 來源：matrix/identity/.agents/specs/identity/apps.json（v0 過渡複製，未來 v1 抽進 @matrix/identity-ui）
+// 規範：matrix/identity/.agents/specs/identity/design.md §2.5
+
+export type AppEntry = {
+  id: string;
+  name: string;
+  url: string;
+  icon?: string;
+  description?: string;
+  access?: 'public' | 'allowlist';
+  allowlist_emails?: string[];
+  locked_tooltip?: string;
+};
+
+export const MATRIX_APPS: AppEntry[] = [
+  {
+    id: 'arcrun',
+    name: 'Arcrun',
+    url: 'https://arcrun.dev',
+    icon: '🔄',
+    description: '工作流引擎與零件平台',
+  },
+  {
+    id: 'dashboard',
+    name: 'Dashboard',
+    url: 'https://arcrun.dev/dashboard',
+    icon: '🔑',
+    description: 'API Key 管理',
+  },
+  {
+    id: 'integrations',
+    name: 'Integrations',
+    url: 'https://arcrun.dev/integrations',
+    icon: '🧩',
+    description: '服務目錄',
+  },
+  {
+    id: 'mira',
+    name: 'Mira',
+    url: 'https://arcrun.dev/mira',
+    icon: '🌊',
+    description: '個人化 KM 河道',
+    access: 'allowlist',
+    allowlist_emails: ['leo21c@gmail.com'],
+    locked_tooltip: '即將開放',
+  },
+];
+
+export function isAppAccessible(app: AppEntry, userEmail: string | null): boolean {
+  if (app.access !== 'allowlist') return true;
+  if (!userEmail) return false;
+  return (app.allowlist_emails ?? []).includes(userEmail);
+}