feat(orbit): add shared library foundations and gated host tools

Extract the HTTP host and catalog layer into qbz-control, preserve the
existing daemon API, and keep private session credentials out of SSE.

Scope library stores and scan workers to their host. Share bounded source
search and show Local results alongside Qobuz in the Qt search page.

Add the launch-gated Qt Orbit laboratory and persistent remote-context
banner. Let qbzd run --orbit own and administer its file library through
instance-scoped API and CLI operations. Full remote UI control remains
pending.

Validate library/control/daemon suites, Qt search and QML regressions,
two isolated daemon processes, Qt release build and final cargo check.

cx

crates/qbzd/Cargo.toml

@@ -13,6 +13,8 @@ path = "src/main.rs"
 # workspace crates shared by the daemon and the Qt application
 qbz-models = { path = "../qbz-models" }
 qbz-app = { path = "../qbz-app" }
+qbz-library = { path = "../qbz-library" }
+qbz-control = { path = "../qbz-control" }
 qbz-core = { path = "../qbz-core" }
 qbz-player = { path = "../qbz-player" }
 qbz-audio = { path = "../qbz-audio" }          # PROTECTED — read-only consumer