refactor(logs,landscape): unified log targets, injection-safe profile writes

[Datata1]

Implements plans/refactor/05-logs-landscape-hardening.md:

• One stream/collect implementation instead of six: frozen target dataclasses (StageTarget, ServerTarget, ReplicaTarget) select the StreamOperation; WorkspaceLogManager.open/stream/collect take a LogTarget. The six legacy methods (stream_server, stream_replica, collect_server, collect_replica, open_*_stream) and the positional stream(stage, step) form remain as deprecated shims that warn and delegate (tested via pytest.warns)
• save_profile no longer builds a shell heredoc from user content: YAML is transported base64-encoded (printf '%s' '' | base64 -d), so content containing PROFILE_EOF, , backticks, or quotes is inert; get/delete_profile filenames are single-quoted. Adversarial round-trip tests cover terminator/substitution/quote/CRLF/unicode payloads
• LogStream takes the APIHttpClient and uses its new public stream() passthrough and stream_timeout property (configured connect timeout, unbounded read) instead of reaching into _get_client() with a hardcoded Timeout(5.0); SSE terminator event names are a module constant
• LogEntry.kind is a LogKind enum (I/E) with str fallback for unknown values (left_to_right union)

No breaking changes: all legacy method names keep working with a DeprecationWarning.

[github-actions]

🛡️ Bandit Security Scan Results

✅ No security issues found by Bandit.

[github-actions]

Pytest Coverage Report

File	Stmts	Miss	Branch	BrPart	Cover	Missing
__init__.py	9	0	0	0	100%
client.py	40	0	6	0	100%
config.py	9	0	0	0	100%
exceptions.py	94	32	38	22	59%	25->30, 40–42, 53->58, 54->55, 55, 73->74, 74, 85–87, 101–104, 106–107, 148–151, 158–160, 196->197, 197–199, 204->205, 205, 206->207, 207, 210->211, 211, 214, 215->216, 216, 217->218, 218–219, 222
http_client.py	59	10	6	2	82%	45, 51–52, 58, 61->exit, 71->exit, 106–107, 109–110, 115–116
utils.py	10	2	4	1	79%	9->10, 10–11
core
__init__.py	4	0	0	0	100%
base.py	55	0	2	0	100%
handler.py	59	3	18	0	96%	80–82
operations.py	15	0	0	0	100%
resources
__init__.py	0	0	0	0	100%
resources/metadata
__init__.py	3	0	0	0	100%
operations.py	6	0	0	0	100%
resources.py	13	0	0	0	100%
schemas.py	28	0	0	0	100%
resources/team
__init__.py	5	0	0	0	100%
operations.py	8	0	0	0	100%
resources.py	11	0	0	0	100%
schemas.py	27	0	0	0	100%
resources/team/domain
__init__.py	3	0	0	0	100%
operations.py	11	0	0	0	100%
resources.py	16	0	0	0	100%
schemas.py	55	5	0	0	91%	67, 69, 72, 75–76
resources/team/usage
__init__.py	3	0	0	0	100%
operations.py	4	0	0	0	100%
resources.py	43	2	8	2	92%	99->102, 102, 162->165, 165
schemas.py	70	7	6	5	84%	66->67, 67, 72–73, 76, 84–86
resources/workspace
__init__.py	5	0	0	0	100%
envVars.py	4	0	0	0	100%
operations.py	12	0	0	0	100%
resources.py	16	2	4	2	80%	13->14, 14, 19->20, 20
schemas.py	99	14	6	6	81%	100–101, 103–109, 115–116, 118, 142, 161
resources/workspace/env_vars
__init__.py	3	0	0	0	100%
operations.py	7	0	0	0	100%
resources.py	25	2	12	4	84%	28->30, 30–31, 33->exit
schemas.py	4	0	0	0	100%
resources/workspace/git
__init__.py	3	0	0	0	100%
operations.py	8	0	0	0	100%
resources.py	15	0	4	0	100%
schemas.py	4	0	0	0	100%
resources/workspace/landscape
__init__.py	3	0	0	0	100%
operations.py	12	0	0	0	100%
resources.py	96	7	36	8	89%	28->29, 29, 129->132, 135->138, 161->162, 162–163, 165->160, 168->169, 169, 173–175
schemas.py	290	29	10	4	89%	113–114, 117, 122–123, 126–127, 130, 135–137, 140–141, 144, 251, 258–259, 334–336, 338–340, 342–343, 458–459, 466–467
resources/workspace/logs
__init__.py	3	0	0	0	100%
operations.py	5	0	0	0	100%
resources.py	175	50	60	37	63%	66->68, 68, 97–98, 104, 106–108, 110, 113–114, 117, 120–121, 123–126, 128–129, 132–133, 135–136, 138–139, 141–143, 145–146, 148–152, 154–155, 157–159, 161–166, 179–180, 252–253
schemas.py	22	0	0	0	100%
TOTAL	1471	165	220	93	85%

Test Execution Summary

Tests	Skipped	Failures	Errors	Time
300	0 💤	0 ❌	0 🔥	3.178s ⏱️