fix(bash): close managed environment review gaps

The managed DSH_* runtime path was correct, but its public extension and documentation contracts were incomplete. A contributor following the README could access ctx.bashEnv without declaring an injection, the new environment types had no drift-checked catalog entries, and the capability graph omitted three packages that now query sessionPersistence.

Declare the README injection, catalog DshEnvironmentKey and DshEnvironment, and add tool-bash plus both hook bridges to the generated persistence consumer graph. Keep BashEnvRegistry.list() contributor-only for now because no production caller treats it as exhaustive, but record the built-in enumeration gap before diagnostics, prompt, or UI code depends on it.

Validated on the exact resulting tree with typecheck, lint, coverage, snapshot, documentation, module-graph, build, hygiene, demo-smoke, and built-artifact checks.

packages/bash/tool-bash/README.md

@@ -32,6 +32,8 @@ Every foreground and background model bash call receives a newly collected trust
 import type { Context } from 'cordis'
 import type {} from '@deepseek-ai/dsh-tool-bash'
 
+export const inject = ['bashEnv']
+
 export function apply(ctx: Context): void {
   ctx.bashEnv.register({
     name: 'deployment-region',