fix(web): the session inventory lists only the keys the chat can open

The sidebar grouped everything that was not `interactive:` under
"other keys", minus the phone's status keys. That included the coding
jobs' `job:<instance>#<id>` keys and forge keys — and those are dead
ends: the message, event and history routes answer only for the
resident prefixes (`is_resident_key`), so opening one 400s and the row
sits there looking busy with nothing inside. A finished job's key was
worse than useless while its dispatch spun: `reacquire`, forever.

`isResidentKey` names the rule once, beside `isInteractive` —
`interactive:`, `task:`, `calendar:` — and the inventory filters on it.
That leaves the phone's keys out as before, keeps scheduled tasks
(their turns have real transcripts), and stops offering keys the chat
surface cannot address. The shell's `nextActiveKey` follows the same
rule: after a delete the chat moves to the next key it can open, or to
none. The full list stays on the wire — the API's inventory is the
dispatcher's, not the client's, and the delete route still answers for
any key with a record.

Consequence worth naming: a `job:` or forge key has no row now, so it
cannot be deleted from the sidebar either.

web/claw/app/composables/useClaw.ts

@@ -248,6 +248,18 @@ export function isInteractive(key: string): boolean {
   return key.startsWith(INTERACTIVE_PREFIX)
 }
 
+/** The prefixes the chat surface answers for: the daemon's
+ * `is_resident_key` (`crates/rhema-claw/src/interactive.rs`). Every other
+ * key in the inventory — `phone:` status reporting, `job:<instance>#<id>`,
+ * a forge thread — has no transcript: the message, event and history
+ * routes 400 on it. */
+const RESIDENT_PREFIXES = ['interactive:', 'task:', 'calendar:']
+
+/** Whether `key` is one the transcript surface can open. */
+export function isResidentKey(key: string): boolean {
+  return RESIDENT_PREFIXES.some((prefix) => key.startsWith(prefix))
+}
+
 /** The session name `POST /v1/sessions` accepts; the key becomes
  * `interactive:<name>`. Anything else is a 400. */
 export const SESSION_NAME_PATTERN = /^[A-Za-z0-9._-]{1,64}$/