feat: add the TechLog asset multipart upload transport

Wires the whole Asset capability into the running application: the
multipart upload transport (the contract runtime can only express JSON
bodies), a single composition-root-owned CSRF provider shared between
the platform's credential collaborator (18 JSON operations) and the
upload transport (1 multipart operation), and Studio/StudioShell
exposure of the Asset gateway alongside the existing document gateway.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

src/features/installed-feature-adapters.ts

@@ -2,6 +2,7 @@ import type { ApplicationFeatureInputs } from "../application/ports/in/applicati
 import { createReferenceFeatureInstalledInput } from "./reference-feature/adapters/create-reference-feature-input.ts";
 import { REFERENCE_FEATURE_ID } from "./reference-feature/contracts/reference-feature-contract.ts";
 import { createTechLogFeatureInstalledInput } from "./tech-log/adapters/create-tech-log-feature-input.ts";
+import type { CsrfTokenProvider } from "./tech-log/adapters/http/studio-session-csrf.ts";
 import { TECH_LOG_FEATURE_ID } from "./tech-log/application/tech-log-feature-input.ts";
 import { INSTALLED_PRODUCT_FEATURE_IDS } from "./installed-product-manifest.ts";
 
@@ -20,7 +21,12 @@ type InstalledFeatureInputs = Readonly<
 
 export function createInstalledFeatureInputs(
   context: Parameters<typeof createReferenceFeatureInstalledInput>[0] &
-    Readonly<{ studioSource: "MOCK" | "HTTP" }>,
+    Readonly<{
+      studioSource: "MOCK" | "HTTP";
+      apiBaseUrl: string;
+      requestTimeoutMs: number;
+      csrf: CsrfTokenProvider;
+    }>,
 ): InstalledFeatureInputs {
   const techLogFeature = createTechLogFeatureInstalledInput(context);
   if (!INSTALLED_PRODUCT_FEATURE_IDS.includes(REFERENCE_FEATURE_ID)) {