chore(lock): logos-plugin-qt -> master for logos_consumer.h, protocol to the rev master implements

WHAT MOVED

  logos-plugin-qt  ef11c210 -> 7cad5ec3  (master, #27 merged)
  logos-protocol   79894727 -> b37a2e9f  (0.5.0 -> 0.7.0)

WHY plugin-qt HAD TO MOVE

This branch's ui-host calls logos::adoptConsumerCredential and the bridge
takes a logos::ConsumerIdentity, both declared in cpp/logos_consumer.h. That
header did not exist at ef11c210, so every build here died at

  LogosQmlBridge.h:17:10: fatal error: logos_consumer.h: No such file or directory

logos-plugin-qt#27 ("logos::admitConsumer -- one home for admitting a
non-module") merged as 7cad5ec3 and ships logos_consumer.h / .cpp. Relocking
that input is the whole fix for the reported red.

WHY protocol MOVED TO 0.7.0 AND NOT TO MASTER

logos-plugin-qt's logos-protocol input `follows` OURS, so this repo -- not
plugin-qt's own lock -- decides which protocol logos-qt-host is compiled
against. The first attempt took protocol to master (42460e5b, 0.8.0). It does
not build, and it does not fail in this repo:

  logos-plugin-qt/cpp/logos_consumer.h:68:4: error: #error "logos-protocol is
  newer than the consumer-admission contract this file implements. A private
  token store is created empty; if the protocol changed how a consumer is
  seeded, this file and the hosts calling logos::admitConsumer must move in the
  SAME wave. Review adoptCredentialFor / bootstrapKeys, then raise this bound."

That is a deliberate upper bound in plugin-qt master:

  #if defined(LOGOS_PROTOCOL_VERSION_MINOR) \
      && (LOGOS_PROTOCOL_VERSION_MAJOR > 0 \
          || (LOGOS_PROTOCOL_VERSION_MAJOR == 0 && LOGOS_PROTOCOL_VERSION_MINOR > 7))

Every other version guard in the fleet is a `>=` floor; this one is a ceiling,
written precisely so a protocol bump cannot outrun the consumer-admission
contract silently. protocol 42460e5b (0.8.0, the INBOUND/OUTBOUND direction
split) merged at 14:16:33Z and logos-plugin-qt#27 merged at 14:16:41Z, eight
seconds later, on top of 0.7 -- plugin-qt master's own flake.lock pins
logos-protocol b37a2e9f. So plugin-qt master implements the <= 0.7 contract and
no branch anywhere raises the bound yet.

b37a2e9f is therefore not a compromise, it is the rev plugin-qt master itself
locks: this closure is the one plugin-qt's own CI validates, and there is no
protocol split. Verified in the built closure:

  logos-view-module-runtime  compiles against  logos-protocol 0.7.0
  logos-qt-host-0.1.0        links             logos-protocol-lib-0.7.0
  logos-cpp-sdk              contributes no protocol path at all
                             (header-only Qt-free types; its own 0.2.0
                              logos-protocol lock node never reaches the build)

Nothing in this repo references a 0.8-only symbol (no saveInboundToken, no
adoptCredential/adoptCredentialFor, no LOGOS_PROTOCOL_VERSION guard), so 0.8
buys this branch nothing today. flake.nix is untouched and the lock's
`original` for logos-protocol stays master-tracking -- once plugin-qt raises
the bound, a plain `nix flake lock --update-input logos-protocol` carries this
repo to 0.8 with no edit.

CHECKS -- every target the flake exposes for this builder, built individually
with --print-out-paths, upstream cache only (cache.nix.logos.co is 502), so
these are real from-source builds:

  packages.x86_64-linux.default    OK
    /nix/store/gajjq3050m46sprbiqqz0c32mhi95vb7-logos-view-module-runtime-1.0.0
  checks.x86_64-linux.default      OK
    /nix/store/9a4wvnp6b226s2lam54dgxmzm86r9j58-logos-view-module-runtime-check-1.0.0
  packages.x86_64-linux.tests      OK  (same derivation as the check)
    /nix/store/9a4wvnp6b226s2lam54dgxmzm86r9j58-logos-view-module-runtime-check-1.0.0
  checks.x86_64-windows.default    OK  (cross to mingw; compile only, nix
                                        forces doCheck off for a cross build,
                                        so no ctest ran there)
    /nix/store/csp4n8hn0xrf2j2lxflv6k8affbn180v-logos-view-module-runtime-check-x86_64-w64-mingw32-1.0.0
  packages.x86_64-windows.default  OK  (bin/ui-host.exe is a real PE32+)
    /nix/store/s8y4s43nfl8932hnffg645bzn9dqy5fs-logos-view-module-runtime-x86_64-w64-mingw32-1.0.0

checks.x86_64-linux.default runs the suite in its checkPhase:

  Start  1: LogosQmlBridgeUnitTests        Start  6: BridgeIdentityTests
  Start  2: LogosQmlBridgeE2ETests         Start  7: LogosQmlBridgeDeferredTests
  Start  3: LogosQmlBridgeGuiTests         Start  8: LogosQmlBridgeCallsTests
  Start  4: LogosQmlBridgeResultTests      Start  9: LogosQmlBridgeReplayTests
  Start  5: LogosQmlBridgeHandshakeTests   Start 10: UiHostUnloadTests
  100% tests passed, 0 tests failed out of 10
  Total Test time (real) =  39.36 sec

BridgeIdentityTests is the suite this branch adds, so admitConsumer /
adoptConsumerCredential are exercised, not merely linked.

NOT VERIFIED: the aarch64-* and *-darwin outputs. This builder is x86_64-linux
and there is no darwin remote; CI's macos-latest leg covers them.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

flake.lock

@@ -68,11 +68,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1786415321,
-        "narHash": "sha256-Oe98SavQSVGBIY7WIc8RQ5l+Bl4KLsdmjb+PyscfdNw=",
+        "lastModified": 1787248041,
+        "narHash": "sha256-WHmisUvYA8DQ2ZxSF2mM2INTEuxfyF07ypPOf+lOik4=",
         "owner": "logos-co",
         "repo": "logos-lidl",
-        "rev": "ffeebf2e90fa0c65e8c486988271fe0ca029d1e1",
+        "rev": "ae3ffe0fe9e7e020dc259208a67ca8823fcab93a",
         "type": "github"
       },
       "original": {
@@ -158,11 +158,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1787346530,
-        "narHash": "sha256-ZN699QDeXZq3rUHP5GafqU3a6lPyx3UFHgqnBm71kMk=",
+        "lastModified": 1787581001,
+        "narHash": "sha256-t6ipDIJ8nnu3/VMQ8kHz8FirkomLJSyIdSc5bHDuc44=",
         "owner": "logos-co",
         "repo": "logos-plugin-qt",
-        "rev": "ef11c2108af67d9539fb54c6895a58a46b84e89c",
+        "rev": "7cad5ec3816287f224d1f136f1fa428718356023",
         "type": "github"
       },
       "original": {
@@ -208,11 +208,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1787344378,
-        "narHash": "sha256-B+o4VsDlFcFC9izYI9cpQ4e0tPdoePQdCV/kEEMbXJA=",
+        "lastModified": 1787577420,
+        "narHash": "sha256-dN1A6GMVr036yYjS2mIA8N7cjtCuBJol8CfuBAZ5Pds=",
         "owner": "logos-co",
         "repo": "logos-protocol",
-        "rev": "79894727e59a94d8f63c9e725987be5e3b154f15",
+        "rev": "b37a2e9f1c2f1d07b04c84f6c83b00fb281ef013",
         "type": "github"
       },
       "original": {