feat(cosh): add anolisa component contract

[kongche-jbw]

Description

Adds a minimal ANOLISA component contract for the copilot-shell RPM so cosh
can be adopted and inspected by anolisa without declaring any adapter behavior.

The RPM now installs component.toml under the package datadir contract path
and exposes anolisa-component(cosh) as a virtual provide.

Ship Note

What changed:

• Added src/copilot-shell/component.toml for the cosh runtime component.
• Updated the RPM spec to install the contract under /usr/share/anolisa.
• Added Provides: anolisa-component(cosh) for package discovery.

Known limitations:

• This contract is intentionally adopt/status only.
• No cosh adapter, skill, or framework integration is declared.

Related Issue

N/A

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Refactoring (no functional change)
• Performance improvement
• CI/CD or build changes

Scope

• cosh (copilot-shell)
• sec-core (agent-sec-core)
• skill (os-skills)
• sight (agentsight)
• tokenless (tokenless)
• ckpt (ws-ckpt)
• memory (agent-memory)
• anolisa (anolisa-cli)
• skillfs (SkillFS)
• Multiple / Project-wide

Checklist

• I have read the Contributing Guide
• My code follows the project's code style
• I have added tests that prove my fix is effective or that my feature works
• I have updated the documentation accordingly
• For anolisa: cargo clippy --all-targets --locked -- -D warnings, cargo fmt --all --check, and cargo test --locked pass
• Lock files are up to date (package-lock.json / Cargo.lock)

Testing

cd src/anolisa
cargo test -p anolisa-core --locked manifest --quiet

Also validated:

• src/copilot-shell/component.toml parses as TOML.
• rpmspec -P expands the updated spec with the new contract path.

Additional Notes

The existing spec changelog emits a date warning under rpmspec -P; this PR
does not change that changelog entry.