feat(publish): add tenant publish management with desktop deep-link

Expose tenant-authenticated publish task list and retry endpoints so the
admin web can show desktop publish state without an Electron bridge, and
register a `shengxintui://` deep-link so the page can hand off to the
desktop client workbench.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/desktop-client/src/main/single-instance.ts

@@ -2,7 +2,7 @@ import { app } from 'electron/main'
 
 let initialized = false
 
-export function initSingleInstance(onSecondInstance?: () => void): boolean {
+export function initSingleInstance(onSecondInstance?: (argv: string[]) => void): boolean {
   if (initialized) {
     return true
   }
@@ -13,8 +13,8 @@ export function initSingleInstance(onSecondInstance?: () => void): boolean {
     return false
   }
 
-  app.on('second-instance', () => {
-    onSecondInstance?.()
+  app.on('second-instance', (_event, argv) => {
+    onSecondInstance?.(argv)
   })
 
   return true