feat(macos): add query, a targeted accessibility lookup

[hyprcat]

Find macOS controls by text and/or role without first taking a screenshot or rendering the full AX tree. This retains hyprcat’s original implementation commit and integrates current main, including persistent image configuration, hardware/SCK capture and background/agent-display behavior.

var safari = await cua.getApp("Safari", { initialState: false });
var result = await safari.query({ text: "Compose", role: "button", exact: true });
nodeRepl.write(result);
// After checking the result, use its index in this same session.

• Native query and JS app.query() return matches with truncated, stop_reason, visited_nodes, window_id and effective budgets. Exact matching never silently retries a substring.
• A single bounded BFS applies consistent matching and geometry rules: default 500 nodes, capped at 5000; default 20 matches, capped at 100; bounded child pages/queue/text and a two-second cooperative traversal deadline with AX messaging timeouts. AX failures and long text are reported as incomplete results.
• Query resolves already-running apps without activation, raise or capture. Invalid window IDs/types produce tool errors instead of numeric-conversion traps.
• Handles are bound to the app process and window, expire after 120 seconds, retain at most 5000 entries and are cleared at session end. Before acting, revalidate window ownership, control metadata/query criteria and fresh geometry; stale handles never fall back to cached coordinates.
• Existing getApp() behavior is preserved. { initialState: false } skips its initial snapshot. Query then action requires the same persistent MCP/ocu repl session; separate CLI calls cannot reuse indexes.
• macOS adds the tenth native tool. Windows/Linux retain the nine core tools and report query as unsupported. The model-facing plugin still advertises only js / js_reset.

Usage and option tables: English, 中文. Architecture, skill guidance, release notes and history are updated.

Validation: swift test passes 207 tests (7 skipped); all 33 Node tests pass; make check-docs and whitespace checks pass. A direct native CLI negative-window-ID regression returns a structured error and exit 1 without trapping.

Live desktop timing and stale-window scenarios have not been exercised interactively in this follow-up. The cooperative traversal deadline cannot interrupt an in-flight system call, and query only sees AX controls the app exposes.

[hyprcat]

@iFurySt checking in: query looks up specific AX elements without a full snapshot, which pairs well with the JS REPL for cheap targeted reads. It conflicts with main now; happy to rebase onto the REPL work if you want it, or close it if it doesn't fit.