fix: address 8-domain Oracle review findings (C1, C2, M1-M4)

- C1: thinking-prepend unique part IDs per message (global PK collision)
- C2: recover-thinking-disabled-violation try/catch guard on SDK call
- M1: remove non-schema truncated/originalSize fields from SDK interfaces
- M2: messageHasContentFromSDK treats thinking-only messages as non-empty
- M3: syncAllTasksToTodos persists finalTodos + no-id rename dedup guard
- M4: AbortSignal.timeout(30s) on HTTP fetch calls in opencode-http-api

All 2739 tests pass, typecheck clean.

src/hooks/anthropic-context-window-limit-recovery/pruning-tool-output-truncation.ts

@@ -24,9 +24,7 @@ interface SDKToolPart {
   type: string
   callID?: string
   tool?: string
-  state?: { output?: string }
-  truncated?: boolean
-  originalSize?: number
+  state?: { output?: string; time?: { compacted?: number } }
 }
 
 interface SDKMessage {
@@ -120,7 +118,7 @@ async function truncateToolOutputsByCallIdFromSDK(
       for (const part of msg.parts) {
         if (part.type !== "tool" || !part.callID) continue
         if (!callIds.has(part.callID)) continue
-        if (!part.state?.output || part.truncated) continue
+        if (!part.state?.output || part.state?.time?.compacted) continue
 
         const result = await truncateToolResultAsync(client, sessionID, messageID, part.id, part)
         if (result.success) {