workflow: rename dsh-workflow-vm to dsh-workflow-workerthread

Pure mechanical rename now that the package's internals are the
worker-thread engine: directory, package name, spec/e2e filenames,
module tags and logger prefixes, tsconfig/knip/run-gates/AGENTS.md
references, example cordis.yml plugin ids, doc links; catalogs
regenerated and the lockfile refreshed.

scripts/gen-doc-graphs.ts

@@ -191,7 +191,7 @@ const SERVICE_ROLES: ServiceRole[] = [
     pkg: 'workflow',
     title: 'Workflow script engine',
     mode: 'seam',
-    implementations: ['workflow-vm'],
+    implementations: ['workflow-workerthread'],
     consumers: ['tool-workflow'],
     note: 'One engine per context (bash shape, no named-provider registry); the worker-thread engine fans agent() calls out through ctx.subagents.',
   },

scripts/gen-tool-catalog.ts

@@ -51,7 +51,7 @@ import * as ToolFs from '@deepseek-ai/dsh-tool-fs'
 import * as ToolTodo from '@deepseek-ai/dsh-tool-todo'
 import * as ToolSubagent from '@deepseek-ai/dsh-tool-subagent'
 import * as ToolWeb from '@deepseek-ai/dsh-tool-web'
-import VmWorkflowEngine from '@deepseek-ai/dsh-workflow-vm'
+import VmWorkflowEngine from '@deepseek-ai/dsh-workflow-workerthread'
 import * as ToolWorkflow from '@deepseek-ai/dsh-tool-workflow'
 
 const root = resolve(import.meta.dirname, '..')

scripts/run-gates.ts

@@ -313,7 +313,7 @@ function builtBinSmokeGate(): Gate {
     // The workflow engine's built worker bundle: the only automated proof
     // that lib/index.js resolves its sibling lib/worker.js under plain node
     // (the e2e lane runs unbuilt, so this file self-skips there).
-    'packages/workflow/workflow-vm/tests/built-worker.e2e.ts',
+    'packages/workflow/workflow-workerthread/tests/built-worker.e2e.ts',
   ], {
     label: 'built-bin smoke',
     needs: ['build'],