perf(startup): prepare first-run node files in the background

On a first run or after an upgrade, Windows release builds wrote the
bundled Sapling params, asmap, node and miner (about 88 MB) in
App::init, before the first frame: 0.5-3 s of frozen blank window, 5-30 s
on a slow disk or under antivirus. Zip, AppImage and .app builds copied
the bundled files into the daemon dir and hashed the 51.5 MB of params on
the UI thread at the first node start, a 0.3-1.5 s freeze in the wizard
or the connect loop.

A stat-only check at startup decides whether anything is missing, stale
or unverified; a normal launch starts no thread and shows nothing.
Otherwise one background job extracts (Windows) or copies (Linux, macOS)
the files, then verifies the params once:

- The first frame paints at once. If the job takes longer than 0.4 s, a
  chip at the bottom shows "Preparing wallet files... N%", then
  "Verifying wallet files...".
- A node start on the UI thread while the job runs is deferred and
  replayed when it ends (never into a bootstrap download, a restart or a
  live connection); worker threads wait, and give up on quit. After an
  upgrade that ships a new miner, the node starts after the miner is
  written instead of before. Pool-miner starts and the miner version
  check wait too, so the old miner is never run or reported while it is
  being replaced.
- Each file goes to "<name>.partial", is flushed and renamed into place
  under one lock shared with the daemon start, the bundled-node
  reinstall and the miner extraction, and the job stops between 4 MB
  chunks at shutdown. An interrupted write used to leave a truncated
  binary that was trusted forever; a leftover .partial is now removed.

Other behaviour changes:

- Linux and macOS full-node builds copy the bundled node files (about
  77 MB) into the daemon dir at first launch, even if the wallet ends up
  on an external node; before, this happened at the first embedded start.
- Lite no longer writes the 53 MB of params and asmap it never reads.
- A disk-full or permission failure that leaves the node files unusable
  shows a warning; a miner blocked by antivirus alone does not.
- A corrupt or truncated param in a zip, AppImage or .app install is
  replaced from the bundle and verified again instead of trusted forever.
- Reinstalling the bundled node holds off the connect loop and a deferred
  start for its whole run (either could launch the old binary while the
  new one was written), and is refused while another restart is running.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/app.h

@@ -38,6 +38,7 @@
 #include "services/wallet_security_controller.h"
 #include "services/wallet_security_workflow.h"
 #include "util/async_task_manager.h"
+#include "resources/provision_state.h"
 #include "util/background_sampler.h"
 #include "util/coalescing_writer.h"
 #include "util/fetch_backoff.h"
@@ -768,9 +769,10 @@ public:
     void verifyDebugCredential(const std::string& secret, std::function<void(bool)> cb);
 
     /// @brief Something finished on a background thread and waits for update() to apply it on the main thread
-    /// (the RPC worker lanes, the HTTP lane, lite wallet ops). main.cpp's idle loop polls this every <= 200 ms
-    /// (hasImmediateWork) and renders a frame when it is true, so the result shows without input, even while the
-    /// window is hidden. A new lane whose results are applied in update() adds its term HERE.
+    /// (the RPC worker lanes, the HTTP lane, lite wallet ops, the startup node-file job). main.cpp's idle loop
+    /// polls this every <= 200 ms (hasImmediateWork) and renders a frame when it is true, so the result shows
+    /// without input, even while the window is hidden. A new lane whose results are applied in update() adds
+    /// its term HERE.
     bool hasPendingBackgroundResults() const;
     bool hasTransactionSendProgress() const { return send_progress_active_ || send_submissions_in_flight_ > 0 || !pending_opids_.empty(); }
     std::string transactionSendProgressText() const;
@@ -1191,6 +1193,15 @@ private:
         std::chrono::steady_clock::time_point fetchedAt{};
     };
     std::unordered_map<std::string, ExchangeChartCache> exchange_chart_cache_;
+    // Startup node files (Windows: extract the bundled params/node/miner; Linux/macOS: copy them from the exe
+    // dir; full node: then verify the Sapling params) on the "extract-node-files" async task. Declared BEFORE
+    // async_tasks_ so it outlives the task threads if the App is destroyed without shutdown().
+    std::shared_ptr<resources::StartupProvision> startup_files_;
+    std::thread::id ui_thread_id_{};             // set first thing in init(); startEmbeddedDaemon() never blocks it
+    bool daemon_start_after_files_ = false;      // UI thread only: a daemon start was deferred while the job ran
+    void startStartupFilesProvision();
+    void pollStartupFiles();                     // UI thread, every update()
+    void renderStartupFilesChip();               // UI thread, top of render()
     util::AsyncTaskManager async_tasks_;
     bool pending_antivirus_dialog_ = false;  // Show Windows Defender help dialog