feat: add config-owned direct submit runtime

Keep browser-attached workflows on the configured direct-skill path and align the Zhihu export/browser regression contracts with the current ws merge state.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

tests/service_ws_session_test.rs

@@ -14,6 +14,7 @@ use sgclaw::service::{ClientMessage, ServiceEventSink, ServiceMessage, ServiceSe
 
 const RUNTIME_DROP_PANIC_TEXT: &str =
     "Cannot drop a runtime in a context where blocking is not allowed";
+const TEST_ZHIHU_SKILLS_DIR: &str = "D:/data/ideaSpace/rust/sgClaw/claw/claw/skills";
 
 fn read_ws_text<S>(stream: &mut tungstenite::WebSocket<S>) -> String
 where
@@ -808,6 +809,7 @@ fn service_binary_submit_flow_routes_zhihu_through_callback_host() {
   "apiKey": "sk-runtime",
   "baseUrl": "http://127.0.0.1:9",
   "model": "deepseek-chat",
+  "skillsDir": "{TEST_ZHIHU_SKILLS_DIR}",
   "browserWsUrl": "{browser_ws_url}",
   "serviceWsListenAddr": "{service_addr}"
 }}"#
@@ -981,6 +983,7 @@ fn service_binary_submit_flow_uses_callback_host_command_semantics_for_zhihu() {
   "apiKey": "sk-runtime",
   "baseUrl": "http://127.0.0.1:9",
   "model": "deepseek-chat",
+  "skillsDir": "{TEST_ZHIHU_SKILLS_DIR}",
   "browserWsUrl": "{browser_ws_url}",
   "serviceWsListenAddr": "{service_addr}"
 }}"#