fix(managed-runtime): secure auth and lifecycle control across runtimes (#437)

* feat: add OpenCode server authentication with auto-generated passwords

* fix(auth): separate user env and managed OpenCode password state

* fix(auth): enforce env precedence and managed password rotation across runtimes

* fix(vscode): rotate managed auth on startup and harden webview proxy

* build: add dev icons and config for Tauri desktop development

* fix(runtime): start managed OpenCode via CLI and expose active API port

* fix(managed-runtime): control OpenCode lifecycle and surface secure diagnostics

* docs: remove VS Code plugin test runbook

packages/ui/src/stores/messageStore.ts

@@ -1707,12 +1707,14 @@ export const useMessageStore = create<MessageStore>()(
                         };
 
                         if (messageIndex === -1) {
-                            console.info("[MESSAGE-DEBUG] updateMessageInfo: messageIndex === -1", {
-                                sessionId,
-                                messageId,
-                                messageInfo,
-                                existingCount: normalizedSessionMessages.length,
-                            });
+                            if (process.env.NODE_ENV === 'development') {
+                                console.info("[MESSAGE-DEBUG] updateMessageInfo: messageIndex === -1", {
+                                    sessionId,
+                                    messageId,
+                                    messageInfo,
+                                    existingCount: normalizedSessionMessages.length,
+                                });
+                            }
 
                             if (normalizedSessionMessages.length > 0) {
                                 const firstMessage = normalizedSessionMessages[0];