[flows-tinyflows] Runs surface: ResumeRun, parked-run expiry and boot sweep (slice 5) #151

Serve ResumeRun plus parked-run expiry and the boot sweep (tinyflows_catalog::run_management pure parts exist).

Gaps from host flows/ops/resume.rs, run_management.rs:

• ResumeRun adds rejections, flow_id ownership, the pending-match guard and the graph-hash pin (compute_graph_hash).
• Race-safe writes: the finish/cancel writes used on refusal and cancel must match pending_approval only (or check run_registry::is_in_flight) — the host races in [flows-tinyflows] flows bug: resume and cancel races mislabel or tear down a live run openhuman#8023 come from drivers LIVE including running.
• ExpireParked and BootSweep members.

Follow migrate-to-submodule (OpenHuman .claude/skills/): upstream PR → patch release → OpenHuman gitlink bump + registry digest re-pin. Design reference: docs/tinyflows-bus-design.md.

Done when: merged in tinyhumansai/tinyflows with wire tests for every new or changed contract type, released (patch), and the contract version bumped where a served shape changed. Gates: cargo fmt --all -- --check, cargo clippy --all-targets --all-features -- -D warnings, cargo test --all-features in tinyhumansai/tinyflows. OpenHuman adoption is a separate leaf of the epic.

Agent brief

• Files to consider (paths in tinyhumansai/tinyflows): crates/tinyflows-bus/src/runs.rs, crates/tinyflows-module/src/, crates/tinyflows-drivers/src/catalog/runs.rs
• Research: [flows-tinyflows] flows bug: resume and cancel races mislabel or tear down a live run openhuman#8023 interleavings.
• Workflow: an implementing-an-epic step; follow migrate-to-submodule (upstream PR → patch release → OpenHuman gitlink bump + digest re-pin).
• Subagent: tdd-implementer.
• Dependencies: [flows-tinyflows] Runs surface: StartRun, PollRun, CancelRun with module-owned run rows and dedup settle (slice 4b) #149.

Blocked by #149
Parent: tinyhumansai/openhuman#8055