feat: open native protected sections through an owned decode view

test: retain native protected attachment boundary fixtures

fix: reject native window timeouts before screenshot acceptance

test: provide an isolated public library regression lane

feat: retain verified external media in offline recovery caches

feat: resolve external notebook payloads with bounded SMB reads

feat: discover notebook identities and order over local and SMB roots

feat: enumerate bounded SMB directories without partial success

test: retain uncertainty when identical text hides different formatting

feat: export read-only offline recovery archives

feat: offline support and real smb client

feat: onestore implementation