Retain Apple bridge services and bind Win32 runtime

docs/modernization/roadmap.md

@@ -92,6 +92,17 @@ Current hotspot files:
 
 Latest slice:
 
+- The full retained Apple document bridge construction no longer lives inline
+  in `src/platform_legacy/legacy_platform_services.cpp`; it now lives behind
+  `active_legacy_apple_document_platform_services()` in
+  `src/platform_legacy/legacy_platform_state.*`, and that retained service now
+  resets when seeded Apple handles change so first-use bridge capture stays in
+  sync with the active entrypoint state.
+- Win32 main-thread task dispatch no longer reaches `AppRuntime` through
+  `App::I` inside `src/platform_windows/windows_platform_services.cpp`;
+  `src/platform_windows/windows_runtime_shell.*` now binds the active runtime
+  explicitly and clears that binding on shutdown, leaving the Windows queue
+  helper as a thinner runtime forwarder.
 - `App` no longer owns `and_app` or `and_engine`; the retained Android
   entrypoint now seeds only the explicit legacy platform storage snapshot
   needed by touched platform services instead of storing Android-native
@@ -227,7 +238,9 @@ Current architecture mismatches that must be treated as real blockers:
   `platform_legacy`-mirrored Apple/GLFW handle cluster is now seeded
   explicitly from platform entrypoints instead of being copied out of `App`,
   and retained storage roots are now also seeded explicitly instead of being
-  lazily copied from `App::I` inside `active_legacy_storage_paths()`.
+  lazily copied from `App::I` inside `active_legacy_storage_paths()`, while the
+  retained Apple document bridge now also lives in `legacy_platform_state.*`
+  instead of being built inline in `legacy_platform_services.cpp`.
 - `src/platform_legacy/legacy_platform_services.*` is still part of the live
   app shell.
 - `pp_panopainter_ui` still depends on `pp_legacy_app`.

docs/modernization/tasks.md

@@ -1154,6 +1154,11 @@ Current slice:
   also live in `src/platform_legacy/legacy_platform_state.*`, and
   `src/platform_legacy/legacy_platform_services.cpp` now consumes those
   snapshots without direct `App::I` reads in the touched paths
+- the retained Apple document bridge now also lives behind
+  `active_legacy_apple_document_platform_services()` in
+  `src/platform_legacy/legacy_platform_state.*` instead of being built inline
+  inside `src/platform_legacy/legacy_platform_services.cpp`, and that retained
+  service resets when seeded Apple handles change
 - retained Apple callback injection and broader `platform_legacy` singleton
   reach are still open
 - the `platform_legacy`-mirrored Apple/GLFW handle cluster is now seeded
@@ -1210,6 +1215,11 @@ Current slice:
 - `App` also no longer owns `and_app` or `and_engine`; the retained Android
   entrypoint now seeds only the explicit legacy platform storage snapshot
   needed by touched platform services.
+- Win32 main-thread task dispatch also no longer reaches `AppRuntime` through
+  `App::I`; `src/platform_windows/windows_runtime_shell.*` now binds the
+  active runtime explicitly and
+  `src/platform_windows/windows_platform_services.cpp` consumes that bound
+  runtime for enqueue/drain.
 - `App` still owns broader retained legacy platform state, so this remains a
   live ownership task.