fix(qa): resolve DF-002 through DF-011 from QA defect tracking sheet

Batch of fixes for defects tracked in "Task Tracking Template.xlsx" (sheet
Defect Management), verified against the sheet's Root Cause/Cach xu ly
columns before this commit:

- DF-002: Co4E node status not reflected after tab switch + missing
  edit-lock on running/done nodes (node_property_panel.py, co4e_runs.py,
  co4e_workflow_crud.py, co4e_canvas_widget.py, co4e_flow_tabs.py,
  canvas_items.py)
- DF-003: hide the run.bat console window unless the app exits with an
  error (run.bat, scripts/console_visibility.ps1 - new)
- DF-004: floating Help Assistant icon covering the Send button after a
  window resize (presentation/shell/main_window.py)
- DF-005: "block network" toggle didn't stop ICMP/raw-socket tools like
  ping (infrastructure/filesystem/command_tools.py,
  security/command_risk_classifier.py)
- DF-006: Monitoring "gay nang khi log lon" - root cause was re-reading
  the ENTIRE audit log history every 3s tick, not missing pagination;
  bounded to a 30-day window (presentation/monitoring/monitoring_tab.py)
  AND added the "So dong/trang" page-size control the ticket also asked
  for (presentation/monitoring/shared/event_table.py,
  shared/filter_scaffold.py, tabs/action_logs_tab.py, tabs/mcp_tab.py,
  tabs/security_events_tab.py, i18n/agents_admin_tab.py)
- DF-007: support choosing a OneDrive/SharePoint folder as a project's
  working directory via Microsoft Graph, downloaded as a local mirror
  with manual sync (core/projects.py, core/ms365_graph.py,
  core/cloud_workspace_sync.py - new, ui/ms365_signin_dialog.py - new,
  ui/cloud_folder_picker_dialog.py - new, i18n/cloud_workspace.py - new,
  ui/workspace_tab.py)
- DF-008: AI-edit instruction box was a fixed-height single-line QLineEdit;
  replaced with an auto-expanding, Enter-to-send/Shift+Enter-newline input
  (presentation/folder/ai_file_editor_dialog.py)
- DF-011: run_command failed with WinError 267 for a project whose
  per-turn output directory had never been created
  (application/conversations/core_runtime_adapter.py)

DF-009 (AI-edit Apply/Discard buttons easy to miss) and DF-010 (AI reply
language - dev-confirmed not a bug) are intentionally NOT part of this
commit: DF-009 has no code fix yet (still "Assigned" in the sheet, only a
UX recommendation was recorded), DF-010 was rejected as expected behavior.

Tests: tests/test_cloud_workspace_sync.py, tests/test_ms365_cloud_dialogs.py,
tests/test_ai_file_editor_input.py, tests/test_monitoring_page_size.py (all
new, all passing). Full suite: 896 passed, 13 known-and-documented failures
unrelated to this change (an existing core/audit_log.py bug, this checkout
not being a git repo before now, and a repo/subprocess folder-naming
mismatch affecting ~66 characterization tests) - see the sheet's DF-006
Evidence column for details.

presentation/co4e/node_property_panel.py

@@ -38,7 +38,7 @@ from PySide6.QtWidgets import (
 )
 
 from ...config import PROVIDER_LABELS
-from ...core.co4e import PERMISSION_PRESETS, Step
+from ...core.co4e import PERMISSION_PRESETS, STEP_DONE, STEP_RUNNING, Step
 from ...i18n import tr
 from ...ui.icons import icon, icon_picker_combo
 from .node_property_actions_mixin import _StepConfigActionsMixin
@@ -65,6 +65,8 @@ class StepConfigPanel(_StepConfigActionsMixin, QScrollArea):
         self._step: Optional[Step] = None
         self._node_id = ""
         self._loading = False
+        self._ctx_available = ctx is not None
+        self._locked = False
         self.setWidgetResizable(True)
         host = QWidget()
         self.setWidget(host)
@@ -281,6 +283,27 @@ class StepConfigPanel(_StepConfigActionsMixin, QScrollArea):
                 self.sub_list.addItem(sub.agent)
         self._loading = False
 
+    def set_locked(self, locked: bool) -> None:
+        """Khoá/mở khoá các trường chỉnh sửa theo trạng thái chạy của bước.
+
+        Bước đang chạy hoặc đã chạy xong thì khoá lại — tránh sửa nhầm cấu
+        hình trong lúc đang xem kết quả của chính lần chạy đó (sửa xong
+        không rõ là áp dụng cho lần chạy đã xong hay lần chạy tiếp theo).
+        Nút Chạy/Chạy từ đây/Xoá bước vẫn hoạt động bình thường khi khoá —
+        chỉ ô nhập liệu bị khoá, không phải cả panel.
+        """
+        self._locked = locked
+        editable = not locked
+        for w in (self.label_edit, self.role_edit, self.icon_edit,
+                  self.instructions_edit, self.context_edit,
+                  self.model_combo, self.perm_combo, self.verify_chk,
+                  self.rounds_spin, self.skills_list,
+                  self.attach_add_btn, self.attach_del_btn,
+                  self.sub_add_btn, self.sub_del_btn, self.sub_list):
+            w.setEnabled(editable)
+        self.gen_btn.setEnabled(editable and self._ctx_available)
+        self.load_models_btn.setEnabled(editable and self._ctx_available)
+
     def clear_step(self) -> None:
         """Xoá bảng khi không có bước nào được chọn."""
         self._step = None