Replace supervisor with agentrun worker service

Move agent-run orchestration from the legacy supervisor path into the new
agentrun worker/service package and wire it through coredata, server,
policies, and GraphQL resolvers.

This consolidates run lifecycle handling around lease-aware workers and
aligns API surface with the new agent-run domain model so reviewers can
follow one coherent execution path.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/server/api/console/v1/graphql/organization.graphql

@@ -311,6 +311,14 @@ type Organization implements Node {
         orderBy: TaskOrder
     ): TaskConnection! @goField(forceResolver: true)
 
+    agentRuns(
+        first: Int
+        after: CursorKey
+        last: Int
+        before: CursorKey
+        orderBy: AgentRunOrder
+    ): AgentRunConnection! @goField(forceResolver: true)
+
     trustCenter: TrustCenter @goField(forceResolver: true)
     customDomain: CustomDomain @goField(forceResolver: true)
     trustCenterFiles(