fix(bash): close managed environment review gaps

The managed DSH_* runtime path was correct, but its public extension and documentation contracts were incomplete. A contributor following the README could access ctx.bashEnv without declaring an injection, the new environment types had no drift-checked catalog entries, and the capability graph omitted three packages that now query sessionPersistence.

Declare the README injection, catalog DshEnvironmentKey and DshEnvironment, and add tool-bash plus both hook bridges to the generated persistence consumer graph. Keep BashEnvRegistry.list() contributor-only for now because no production caller treats it as exhaustive, but record the built-in enumeration gap before diagnostics, prompt, or UI code depends on it.

Validated on the exact resulting tree with typecheck, lint, coverage, snapshot, documentation, module-graph, build, hygiene, demo-smoke, and built-artifact checks.

packages/bash/tool-bash/README.md

@@ -32,6 +32,8 @@ Every foreground and background model bash call receives a newly collected trust
 import type { Context } from 'cordis'
 import type {} from '@deepseek-ai/dsh-tool-bash'
 
+export const inject = ['bashEnv']
+
 export function apply(ctx: Context): void {
   ctx.bashEnv.register({
     name: 'deployment-region',

packages/bash/tool-bash/src/index.ts

@@ -185,6 +185,8 @@ export class BashEnvRegistry extends Service {
     return Object.freeze(Object.fromEntries(Object.entries(values).sort(([left], [right]) => left.localeCompare(right))))
   }
 
+  // TODO(bash-env-list-builtins): Include registry-owned built-ins before diagnostics,
+  // prompt, or UI code treats list() as an exhaustive environment catalog.
   /**
    * Enumerate plugin-contributed variables without executing their resolvers.
    * @returns declarations sorted by environment variable name.