fix(process): resolve absolute path aliases when matching agents

[TZZheng]

Summary

• canonicalize absolute run directories with realpath in the kernel matcher, doctor copy, and embedded lifecycle watcher copy
• preserve the existing contract that relative run-directory arguments are not matched
• extend the cross-copy test matrix with symlink aliases

Validation

• PYTHONPATH=src python -m pytest -q tests/test_process_match.py — 30 passed
• git diff --check canonical/main...HEAD — passed
• independent read-only review — PASS, no blockers

A broader diagnostic run reported 47 passed, 2 failed in pre-existing refresh-watcher retry/fixture assertions outside the changed matcher behavior; the dedicated matcher matrix and symlink coverage passed.

Risk

realpath intentionally changes only absolute-path alias handling. Relative process arguments remain rejected because their working directory cannot be recovered safely from the process listing.

Fixes #764