refactor(daemon): require runtime access when constructing request execution #4047

Parent: #4045

Purpose

The production router supplies gateway and platformRequestScope, but createRequestExecutionScope makes them optional and createRequestDeviceAccess returns absent claim admission and bindings. Late throwing defaults conceal incomplete wiring.

Owner and scope

packages/daemon/src/server/request-execution-scope.ts, immediate router callers and directly affected scope/claim test fixtures only. Exclude downstream handler context optionality and session teardown files.

Required behavior

Require deviceRuntimeGateway and platformRequestScope at construction and remove the impossible absent-access branch and late gatewayMissing defaults. Preserve existing command claim policy and genuine capability optionality. Reuse existing complete runtime fixtures; no new production seam or forwarding wrapper. Audit roughly ten test files whose omitted access previously disabled actual claim admission: update incorrect assumptions and isolate claim state with existing test scratch helpers rather than disabling admission.

API or evidence example

createRequestExecutionScope({ deviceRuntimeGateway, platformRequestScope, ... }) requires both fields; its internal device-access result cannot represent missing construction dependencies.

Observable completion

• Production callers and all directly affected scope fixtures supply complete gateway and request scope.
• Missing construction dependencies cannot silently bypass claim admission or become late throwing functions.
• Focused tests exercise the same claim-admission path as production, with scratch state isolated; report tests whose old assertions depended on bypassed admission.
• No downstream optional inspectFacts/bindDevice migration, platformCleanup scope expansion or new forwarding abstraction.

Dependencies and sequencing

Blocked by: #4060 for validation. The implementation itself has no semantic prerequisite.

Validation

Focused request scope/router/claim tests, typecheck, format, exact-head affected gate. Preserve missing-capability behavior; distinguish construction requirements from runtime availability.

Base audit SHA: 144bd59890277fd4717995588ad817597c9d6552. Re-read the issue and all Decision: comments before work. Read applicable AGENTS.md routes. Keep one owner boundary per PR. Independent review and serialized exact-head validation are coordinated by the umbrella orchestrator.