feat(bundle): ship dsh-base, dsh-web-app, and dsh-headless profile bundles

Profile bundles are npm packages declaring dsh.patch in their manifest:
dsh-base carries the former base.cordis.yml rows as one insert over the empty
profile root; dsh-web-app carries the web overlay plus a runtime glue plugin
owning what used to be launcher code (frontend dist resolution via
frontend-static, the web-surface prompt section, bash runtime variables, the
readiness-gated URL line); dsh-headless carries the one-shot runner driving a
task turn through the in-process API carrier under the launcher-provided
ctx.headlessIo seam.

packages/bundle/base/src/index.ts

@@ -0,0 +1,14 @@
+/**
+ * @deepseek-ai/dsh-base — the shared dsh core as a profile bundle. The
+ * package's substance is `cordis.patch.yml` (declared by the `dsh.patch`
+ * manifest field): every profile's first patch layer, inserting the base
+ * plugin rows over the empty profile root. This module only names the patch
+ * for consumers that need the path programmatically (the profile composer
+ * resolves it through the manifest field, not through this export).
+ * @module @deepseek-ai/dsh-base
+ */
+
+import { fileURLToPath } from 'node:url'
+
+/** Absolute path of this bundle's profile patch. */
+export const patchPath: string = fileURLToPath(new URL('../cordis.patch.yml', import.meta.url))