fix(config): bind dashboard profile writes to daemon identity

Completes 087768f (config-vertical wind-down): the last two of its
eight remaining hunks. handle_dashboard now takes the
daemon_user_profile_id that execute_tool_dispatch already threads
through ToolCallRegistryOptions (landed via 087768f + bb6f598),
and the profile identity for DashboardInvocationExecutorAdapter comes
from the daemon-handshake profile identity instead of the
project-session store binding, which is None on the core server that
answers tool calls before the session authorities mount (the 503
configuration_authority_unavailable root, DEFECT B in 087768f).

TIP-UNBREAK: dispatch_groups.rs at HEAD already passes this argument,
so HEAD does not compile without this commit.

Hunk dispositions for the other six (verified with git log -S, ledger
duplication-check honored): application_surface.rs payload arm + import
landed via 3299dce; handlers/mod.rs field + Default landed via
bb6f598; runtime_surface_acceptance idempotency keys landed via
cd42d49. Verification queued per the single-build-runner directive.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: ScriptedAlchemy

src/mcp/tools/handlers/dashboard.rs

@@ -314,6 +314,7 @@ pub(super) async fn handle_dashboard(
     args: Value,
     retained_project_graph_resolver: Option<crate::mcp::server::RetainedProjectGraphResolver>,
     registered_project_session_db: Option<Arc<RegisteredGlobalDb>>,
+    daemon_user_profile_id: Option<UserProfileId>,
     lcm_retrieval: Option<Arc<dyn SessionRetrievalServicePort>>,
     registered_savings_db: Option<Arc<RegisteredGlobalDb>>,
     automation_scheduler_reconciler: Option<AutomationSchedulerReconciler>,
@@ -403,12 +404,14 @@ pub(super) async fn handle_dashboard(
             })?;
             let dashboard_project_graph_resolver = retained_project_graph_resolver
                 .map(crate::mcp::server::dashboard_retained_project_graph_resolver);
-            let dashboard_profile_id = registered_project_session_db
-                .as_ref()
-                .map(|database| database.binding().shard_id.profile_id.clone());
+            // The profile write resolves its configuration layer through the
+            // profile identity the daemon handshake bound, which every
+            // daemon-owned server carries. Reading it from the project-session
+            // store instead withheld every profile mutation on the core server
+            // that answers tool calls before the session authorities mount.
             let application_invocation_executor = application_invocation_executor
                 .map(|executor| {
-                    DashboardInvocationExecutorAdapter::new(executor, dashboard_profile_id)
+                    DashboardInvocationExecutorAdapter::new(executor, daemon_user_profile_id)
                         .map(|adapter| Arc::new(adapter) as Arc<dyn DashboardApplicationRuntime>)
                 })
                 .transpose()?;
@@ -442,7 +445,8 @@ pub(super) async fn handle_dashboard(
                         super::dashboard_git_correlation::DashboardGitCorrelationReadAdapter::new(
                             Arc::clone(database),
                         ),
-                    ) as Arc<dyn crate::dashboard::DashboardGitCorrelationReadPortV1>
+                    )
+                        as Arc<dyn crate::dashboard::DashboardGitCorrelationReadPortV1>
                 });
             crate::hooks::install_dashboard_hook_readiness_projection()?;
             let state = build_state_with_automation_reconciler(