Open script service URLs in-app or external

Adds a Service URLs setting (ask / in-Paseo / external browser) that
controls where URLs from running scripts open on desktop. First click
prompts with a "don't ask again" checkbox; in-Paseo opens a workspace
browser tab. Closing a browser tab now clears its session partition.

packages/app/src/desktop/host.ts

@@ -21,8 +21,22 @@ export interface DesktopDialogOpenOptions {
   }>;
 }
 
+export interface DesktopDialogAskWithCheckboxOptions extends DesktopDialogAskOptions {
+  checkboxLabel: string;
+  checkboxChecked?: boolean;
+}
+
+export interface DesktopDialogAskWithCheckboxResult {
+  confirmed: boolean;
+  dontAskAgain: boolean;
+}
+
 export interface DesktopDialogBridge {
   ask?: (message: string, options?: DesktopDialogAskOptions) => Promise<boolean>;
+  askWithCheckbox?: (
+    message: string,
+    options: DesktopDialogAskWithCheckboxOptions,
+  ) => Promise<DesktopDialogAskWithCheckboxResult>;
   open?: (options?: DesktopDialogOpenOptions) => Promise<string | string[] | null>;
 }
 
@@ -76,6 +90,7 @@ export interface DesktopBrowserShortcutEvent {
 
 export interface DesktopBrowserBridge {
   setActivePane?: (browserId: string | null) => Promise<void>;
+  clearPartition?: (browserId: string) => Promise<void>;
 }
 
 export interface DesktopInvokeBridge {